CVE-2026-117184
Received Received - Intake

Denial of Service in traggo server via GraphQL POST Request

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: MITRE

Description
An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service (DoS) via a crafted POST request to the GraphQL endpoint

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-117184
EUVD
EUVD-2026-114178

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
n/a n/a n/a

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Denial of Service (DoS) issue in the GraphQL endpoint of traggo server version 0.8.3. Attackers can exploit it by sending a specially crafted POST request to the GraphQL endpoint, which causes the server to become unavailable or unresponsive.

Impact Analysis

If you are running traggo server v0.8.3, this vulnerability could allow attackers to disrupt your service by making it unavailable to legitimate users. This could lead to downtime, loss of access to the server, and potential disruption of services relying on the GraphQL endpoint.

Mitigation Strategies

Immediately update traggo server to a version that patches this vulnerability. If no patch is available, consider disabling the GraphQL endpoint or restricting access to it via network controls.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-117184. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart