Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2026-12588

An attacker with access to an HX 10.0.0  and previous versions, may send specially-crafted data to the HX console. The malicious detection would then trigger decompression of a lar

Description

An attacker with access to an HX 10.0.0  and previous versions, may send specially-crafted data to the HX console. The malicious detection would then trigger decompression of a large file that consumes an excessive amount of system resources thus causing a Denial of Service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Trellix Trellix HX Console

Default version status: unaffected

  • 5.1.1affected

References