CVE-2025-8352: Denial-of-service vulnerability in ESET PROTECT On-Prem
Published Oct 6, 2026
·Updated
Allocation of resources without limits or throttling vulnerability in ESET PROTECT On-Prem increased resource consumption (CPU and RAM), leading to conditions for a Denial-of-Service attack.
Affected Software
1 affected component
ESET ESET PROTECT On-Prem
Event History
Oct 6, 2026
CVE Published
via MITRE·02:50 PM
Data Sourced
via MITRE·02:50 PM
DescriptionWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What impact can exploitation have on an affected deployment?
The vulnerability can increase CPU and RAM consumption, creating conditions for a denial-of-service attack. The provided CVSS vector indicates an availability impact limited to the vulnerable component, with no stated confidentiality or integrity impact.
2
Does exploitation require authentication or user interaction?
No. The CVSS vector identifies the attack as network-accessible, with low attack complexity, no privileges required, and no user interaction required.