CVE-2026-2957
Received Received - Intake

Denial of Service in qinming99 dst-admin File Handler

Publication date: 2026-02-22

Last updated on: 2026-04-29

Assigner: VulDB

Description
A weakness has been identified in qinming99 dst-admin up to 1.5.0. This impacts the function deleteBackup of the file src/main/java/com/tugos/dst/admin/controller/BackupController.java of the component File Handler. This manipulation causes denial of service. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-02-22
Last Modified
2026-04-29
Generated
2026-07-06
AI Q&A
2026-02-23
EPSS Evaluated
2026-07-05
NVD
CVE-2026-2957
EUVD
EUVD-2026-7595

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dst-admin_project dst-admin to 1.5.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-404 The product does not release or incorrectly releases a resource before it is made available for re-use.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a weakness in the qinming99 dst-admin software up to version 1.5.0, specifically in the deleteBackup function within the BackupController.java file of the File Handler component.

The vulnerability allows an attacker to manipulate this function to cause a denial of service (DoS) condition.

The attack can be initiated remotely, and the exploit code has been publicly disclosed.

The vendor was notified early but did not respond.

Impact Analysis

This vulnerability can impact you by causing a denial of service (DoS) on the affected system.

A denial of service means that legitimate users may be unable to access or use the backup deletion functionality or potentially other related services.

Since the attack can be performed remotely, it increases the risk of disruption without requiring physical access.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-2957. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart