CVE-2026-1173

Katalog CVE

CVSS 9.8 · Critical EPSS 0,79%

Kerentanan Improper Resource Shutdown or Release pada birkir prime. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /graphql of the component GraphQL Array Based Query Batch Handler. The manipulation results in denial of service. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Rincian

Terbit di NVD

19 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-404: Improper Resource Shutdown or Release

EPSS (30 hari)

0,79% peluang dieksploitasi; lebih tinggi dari 55,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/birkir/prime/issues/544 exploit · issue tracking · advisory vendor
• https://vuldb.com/?id.341767 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.731104 advisory pihak ketiga · vdb entry
• https://github.com/birkir/prime/
• https://vuldb.com/?ctiid.341767 permissions required · vdb entry