CVE-2026-107564
Received Received - Intake

Unauthenticated DoS via Resource Allocation in Product

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: CERT VDE

Description
An unauthenticated remote attacker may use an allocation of resources without limits or throttling weakness in the affected product to cause high CPU load leading to a denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-16
Last Modified
2026-10-16
Generated
2026-10-16
AI Q&A
2026-10-16
EPSS Evaluated
N/A
NVD
CVE-2026-107564
EUVD
EUVD-2026-102868

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
gocsaf Development Community csaf_provider 0.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-107564 is a vulnerability in the csaf_provider component of the gocsaf/csaf software suite. It involves uncontrolled resource consumption due to a lack of limits or throttling, allowing an unauthenticated remote attacker to cause high CPU load and trigger a denial of service condition.

Detection Guidance

Monitor CPU usage spikes on systems running csaf_provider versions 0.0.0 through 3.6.0. Check for unauthenticated remote connections causing high CPU load. Use system monitoring tools like top, htop, or ps to identify processes consuming excessive CPU resources.

Impact Analysis

An attacker could exploit this vulnerability to cause high CPU load, leading to a denial of service. This could disrupt services relying on the affected csaf_provider component, potentially causing downtime or degraded performance.

Compliance Impact

This vulnerability could indirectly impact compliance with GDPR or HIPAA by enabling denial-of-service attacks that disrupt system availability. High CPU load from resource exhaustion may lead to service unavailability, which could violate availability requirements in these regulations.

Mitigation Strategies

Immediately update csaf_provider to version 3.7.0 or later. If updating is not possible, restrict network access to the affected component or disable it until patched. Monitor CPU usage for signs of exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-107564. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart