CVE-2026-6601
Resource Consumption Vulnerability in Lagom WHMCS Datatables Component
Publication date: 2026-04-20
Last updated on: 2026-04-29
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| lagom | whmcs_template | to 2.4.2 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-404 | The product does not release or incorrectly releases a resource before it is made available for re-use. |
| CWE-400 | The product does not properly control the allocation and maintenance of a limited resource. |
Attack-Flow Graph
AI Powered Q&A
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.
Can you explain this vulnerability to me?
This vulnerability exists in the Lagom WHMCS Template up to version 2.4.2, specifically affecting an unknown function within the Datatables component. The issue allows an attacker to manipulate the component in a way that leads to excessive resource consumption. The vulnerability can be exploited remotely, and the exploit details have been publicly disclosed.
How can this vulnerability impact me? :
The primary impact of this vulnerability is resource consumption, which could degrade the performance or availability of the affected system. Since the exploit can be performed remotely, an attacker could potentially cause denial of service or slow down the system by exhausting resources.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability is a client-side Denial of Service (DoS) issue caused by outdated JavaScript libraries (jQuery 1.12.4, 2.1.1 and DataTables 1.10.12) used in the Lagom WHMCS Theme up to version 2.4.2.
Detection can focus on identifying the presence of these vulnerable JavaScript libraries in your web application files or network traffic.
- Use tools like grep or find to search for the vulnerable library versions in your web server files, e.g., `grep -r "jquery-1.12.4.js" /path/to/webroot` or `grep -r "DataTables-1.10.12" /path/to/webroot`.
- Inspect network traffic or web page source code to check if these specific versions of jQuery and DataTables are loaded.
- Use browser developer tools to monitor if the vulnerable DataTables library is initialized repeatedly or with large data sets, which could indicate exploitation attempts.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, the primary step is to update or replace the outdated and vulnerable JavaScript libraries (jQuery and DataTables) used by the Lagom WHMCS Theme.
Since the vulnerability leads to resource exhaustion via repeated initialization of DataTables with large data arrays, limiting or sanitizing input data size and frequency can help reduce risk.
If immediate patching is not possible, consider implementing network-level protections such as rate limiting or blocking suspicious requests that attempt to exploit this behavior.
Monitor client-side behavior for abnormal resource consumption or crashes and inform users to update their browsers or avoid interacting with vulnerable pages until fixed.