CVE-2026-107564 Details
Description
An unauthenticated remote attacker may use an allocation of resources without limits or throttling weakness in the affected product to cause high CPU load leading to a denial of service.
A denial-of-service vulnerability has been identified in the Gocsaf Csaf Provider, specifically in versions 0.0.0 prior to 3.6.0 and version 3.7.0. This vulnerability allows unauthenticated remote attackers to exploit a lack of resource allocation limits or throttling, causing high CPU load and leading to a denial-of-service condition.
Users can update to Gocsaf Csaf Provider version 3.7.0 or later to address this vulnerability. Instructions for updating can be found in the Gocsaf Csaf documentation.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 16, 2026CISA-ADP
Assessed Oct 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://gocsaf.github.io/.well-known/csaf/white/2026/gocsaf-2026-001.json | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-770 | Allocation of Resources Without Limits or Throttling | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| gocsaf csaf_provider | >= 0.0.0, <= 3.6.0 (semver) 3.7.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 16, 2026 | CVE Modified | CISA-ADP |
| Oct 16, 2026 | New CVE Received | [email protected] |