CVE-2026-56150: Allocation of Resources Without Limits or Throttling in Fleet Server Leading to Denial of Service
Allocation of Resources Without Limits or Throttling (CWE-770) in Fleet Server can lead to a denial of service via Excessive Allocation (CAPEC-130). An attacker can submit a specially crafted request to an upload endpoint that causes excessive memory consumption, which may render Fleet Server unavailable.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-56150?
The severity of CVE-2026-56150 is rated as medium with a score of 6.5.
What type of vulnerability is CVE-2026-56150?
CVE-2026-56150 is a vulnerability related to the Allocation of Resources Without Limits or Throttling, which can lead to a denial of service.
How does CVE-2026-56150 affect Fleet Server?
CVE-2026-56150 affects Fleet Server by allowing an attacker to cause excessive memory consumption through specially crafted requests, leading to potential unavailability.
What is the potential impact of CVE-2026-56150?
The potential impact of CVE-2026-56150 is a denial of service, which can render the Fleet Server unavailable to legitimate users.
How can organizations mitigate the risks associated with CVE-2026-56150?
Organizations can mitigate the risks of CVE-2026-56150 by implementing request validation, rate limiting, and resource allocation controls to prevent excessive usage.