CVE-2026-114405 Details
Description
Improper validation of array index vulnerability in Velneo vServer. This issue affects vServer: from 36.0 before 36.6 and from 37.0 before 37.2.
A denial-of-service vulnerability has been identified in Velneo vServer versions 36.0 prior to 36.6 and 37.0 prior to 37.2. The issue arises from improper validation of array indices, allowing malformed VATP packets to disrupt server operations.
Users can upgrade to Velneo vServer versions 36.6 or 37.2 to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 21, 2026CISA-ADP
Assessed Oct 21, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://velneo.es/avisos-de-seguridad/ | 6b608899-1da4-4a4d-8cfe-114101467ac1 | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-129 | Improper Validation of Array Index | 6b608899-1da4-4a4d-8cfe-114101467ac1 |
Affected Products
| Product | Versions |
|---|---|
| Velneo vServer | >= 36.0, < 36.6 >= 37.0, < 37.2 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 21, 2026 | CVE Modified | CISA-ADP |
| Oct 21, 2026 | New CVE Received | 6b608899-1da4-4a4d-8cfe-114101467ac1 |