CVE-2026-5794

Vulnerability in Cryptobox allows an authenticated user to trigger an account lockout PUBLISHED

Description (CNA)

A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to prevent another to login by triggering an account lockout via sending a specially crafted request.

Affected (CNA)

Vendor / product	Versions
Ercom / Cryptobox	unaffected 4.40.175; unaffected 4.37.237 before 4.38.0

CWE

CWE-694

References

https://info.cryptobox.com/doc/v4.40/4.40.en/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.