CVE-2025-26819

CVSS 3.1 Score 8.6 of 10 (high)

Details

Published Feb 15, 2025
CWE ID 770

Summary

CVE-2025-26819 is a vulnerability affecting Monero versions up to 0.18.3.4. The issue lies in the Monero HTTP server, which fails to impose response limits on connections. An attacker can exploit this vulnerability by sending a maliciously large HTTP response to the server, potentially leading to denial-of-service conditions or excessive resource utilization. This can result in degraded performance or even server crashes, posing a significant threat to network availability and stability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share