CVE-2025-8352: Denial-of-service vulnerability in ESET PROTECT On-Prem

Published Oct 6, 2026

Updated

Allocation of resources without limits or throttling vulnerability in ESET PROTECT On-Prem increased resource consumption (CPU and RAM), leading to conditions for a Denial-of-Service attack.

Affected Software

1 affected component

ESET ESET PROTECT On-Prem

Event History

Oct 6, 2026

CVE Published

via MITRE·02:50 PM

Data Sourced

via MITRE·02:50 PM

DescriptionWeakness

Data Sourced

via NVD·03:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What impact can exploitation have on an affected deployment?

The vulnerability can increase CPU and RAM consumption, creating conditions for a denial-of-service attack. The provided CVSS vector indicates an availability impact limited to the vulnerable component, with no stated confidentiality or integrity impact.

Does exploitation require authentication or user interaction?

No. The CVSS vector identifies the attack as network-accessible, with low attack complexity, no privileges required, and no user interaction required.

CVE-2025-8352: Denial-of-service vulnerability in ESET PROTECT On-Prem

Affected Software

Event History

Frequently Asked Questions

What impact can exploitation have on an affected deployment?

Does exploitation require authentication or user interaction?

Company

Resources

Contact

Frequently Asked Questions

What impact can exploitation have on an affected deployment?

Does exploitation require authentication or user interaction?