CVE-2026-109144

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-109144

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-109144.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-109144

Published

2026-10-13T09:15:16Z

Modified

2026-10-15T02:47:26Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X CVSS Calculator

Summary

wbond certvalidator Certificate Path Builder resource consumption

Details

A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the component Certificate Path Builder. Such manipulation leads to resource consumption. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-400",
        "CWE-404"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/109xxx/CVE-2026-109144.json"
}

References

Affected packages

Git / github.com/wbond/certvalidator

Affected ranges

Type

GIT

Repo

https://github.com/wbond/certvalidator

Events

Introduced

cc2ba70bd1518742befc97ce6ee2f496dfb8a26b

Last Affected

b69d3b745b5af9e5ccd4b9781407ab7e82076d6b

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "0.11.0"
        },
        {
            "last_affected":  "0.11.0"
        },
        {
            "introduced":  "0.11.1"
        },
        {
            "last_affected":  "0.11.1"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

0.*

0.11.0

0.11.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-109144.json"