CVE-2026-104628

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-10-08

Last updated on: 2026-10-09

Assigner: ICS-CERT

Description

Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity vulnerability. An authenticated user with Viewer privileges could submit crafted search input that causes excessive processing, potentially degrading the availability of the application.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-08

Last Modified

2026-10-09

Generated

2026-10-19

AI Q&A

2026-10-09

EPSS Evaluated

2026-10-18

NVD

CVE-2026-104628

EUVD

EUVD-2026-95317

Affected Vendors & Products

Vendor	Product	Version / Range
Satel	Satel	Netco Design 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1333	The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.

Attack-Flow Graph

Executive Summary

This vulnerability is an inefficient regular expression complexity issue in Satel Netco Design versions before v2.1.7. An authenticated user with Viewer privileges can submit specially crafted search input that causes excessive processing, potentially degrading application availability.

Detection Guidance

This vulnerability involves inefficient regular expression processing in Satel Netco Design versions prior to v2.1.7. To detect it, monitor for excessive CPU usage or application slowdowns during search operations. Check the application logs for repeated failed search attempts or timeouts. No specific commands are provided in the context.

Impact Analysis

The vulnerability could lead to denial-of-service conditions where the application becomes slow or unresponsive due to excessive processing caused by crafted search inputs.

Compliance Impact

This vulnerability primarily impacts availability by causing excessive processing through crafted search input, which could degrade application performance. It does not directly affect data confidentiality or integrity, which are key focus areas for GDPR and HIPAA. However, prolonged unavailability could indirectly impact compliance by disrupting access to critical data or systems.

Mitigation Strategies

Immediately upgrade Satel Netco Design to version v2.1.7 or later. Restrict Viewer privileges to trusted users only. Implement rate limiting on search inputs to prevent excessive processing. Monitor application performance and network traffic for signs of abuse.

Hi! I’m here to help you understand CVE-2026-104628. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70