CVE Watch23 oct 2026

CVE-2026-50787

e-SIC Livre (esiclivre) v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/captcha.php. The appl

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 23 oct 2026 · Última mod.: 23 oct 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

e-SIC Livre (esiclivre) v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/captcha.php. The application uses user-supplied parameters (l, a, tf, ql) without validation to generate CAPTCHA images, allowing remote attackers to cause denial of service via excessive memory and CPU consumption.

Referencias oficiales

github.comhttps://github.com/brynax/CVE-2026-50787
github.comhttps://github.com/esiclivre/esiclivre/blob/master/restrito/inc/captcha.php

CVEs relacionados

Sin CVEs relacionados por CWE o producto.