Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2026-5794

Vulnerability in Cryptobox allows an authenticated user to trigger an account lockout

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
THA-PSIRT

Description

A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to prevent another to login by triggering an account lockout via sending a specially crafted request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ercom Cryptobox

Default version status: affected

  • 4.40.175unaffected
  • 4.37.237 to < 4.38.0unaffected

References