CVE-2026-41040: High severity GROWI GROWI vulnerability
Published Apr 23, 2026
·Updated
GROWI provided by GROWI, Inc. is vulnerable to a regular expression denial of service (ReDoS) via a crafted input string.
Affected Software
1 affected component
GROWI GROWI
Event History
Apr 23, 2026
CVE Published
via MITRE·06:59 AM
Data Sourced
via MITRE·06:59 AM
DescriptionSeverity
Data Sourced
via NVD·07:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-41040?
CVE-2026-41040 is classified as a denial of service vulnerability due to its potential impact on application availability.
2
How do I fix CVE-2026-41040?
To mitigate CVE-2026-41040, update GROWI to the latest version that addresses this regular expression denial of service vulnerability.
3
What type of vulnerability is CVE-2026-41040?
CVE-2026-41040 is a regular expression denial of service (ReDoS) vulnerability.
4
Who is affected by CVE-2026-41040?
CVE-2026-41040 affects users of GROWI, provided by GROWI, Inc.
5
Can CVE-2026-41040 be exploited remotely?
Yes, CVE-2026-41040 can be exploited remotely via a crafted input string.