PULSE
FEED
ransomemperador reclama a MyM ODONTOCLINICA S.A · BR · Healthcareransomaurora reclama a Estrategias BigMat S.L.U. · ES · Retail & E-Commerceransomnightspire reclama a ***o* **s**e** Solutions · Technologyransomdragonforce reclama a Lane Equipment · US · Manufacturingransomn0n reclama a Company #65 · BR · Not Foundransomqilin reclama a The Golden Legacy Financing · Financial Servicesransomhyflock reclama a Ecuador police headquarters · EC · Government & Defenseransomhyflock reclama a merkezilac_archives · TR · Otherransomwallstreet reclama a Ahlqvist & Almqvist Arkitekter AB · SE · Professional Servicesransomwallstreet reclama a Englunds Konsultbyrå AB · SE · Professional Servicesransomwallstreet reclama a Spectrum Arkitekter AB · SE · Professional Servicesransomwallstreet reclama a Vendus Sweden AB · SE · Otherransomwallstreet reclama a Fab Support AB · SE · Manufacturingransomwallstreet reclama a Byrån för Arkitektur och Urbanism · SE · Professional Servicesransomemperador reclama a MyM ODONTOCLINICA S.A · BR · Healthcareransomaurora reclama a Estrategias BigMat S.L.U. · ES · Retail & E-Commerceransomnightspire reclama a ***o* **s**e** Solutions · Technologyransomdragonforce reclama a Lane Equipment · US · Manufacturingransomn0n reclama a Company #65 · BR · Not Foundransomqilin reclama a The Golden Legacy Financing · Financial Servicesransomhyflock reclama a Ecuador police headquarters · EC · Government & Defenseransomhyflock reclama a merkezilac_archives · TR · Otherransomwallstreet reclama a Ahlqvist & Almqvist Arkitekter AB · SE · Professional Servicesransomwallstreet reclama a Englunds Konsultbyrå AB · SE · Professional Servicesransomwallstreet reclama a Spectrum Arkitekter AB · SE · Professional Servicesransomwallstreet reclama a Vendus Sweden AB · SE · Otherransomwallstreet reclama a Fab Support AB · SE · Manufacturingransomwallstreet reclama a Byrån för Arkitektur och Urbanism · SE · Professional Services
← All CVEs
CVE WatchOct 13, 2026

CVE-2026-109144

A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the component Certificate

CVSS

5.3

Medium

EPSS

—

KEV

—

Exploit Today

0

0-100

Published: Oct 13, 2026 · Last modified: Oct 13, 2026 · CWE-400 · CWE-404

EPSS · 30d

Not enough EPSS history yet.

Technical description

A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the component Certificate Path Builder. Such manipulation leads to resource consumption. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1066277.5 HIG
—
——0CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.18h
CVE-2026-1059027.5 HIG
—
——0CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.18h
CVE-2026-1001397.5 HIG
—
——0CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.18h
CVE-2026-1001387.5 HIG
—
——0CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.18h
CVE-2026-1001377.5 HIG
—
——0CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.18h
CVE-2026-956966.5 MED
—
——0IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception.19h