{"id":"CVE-2026-107079","aliases":["EUVD-2026-108206","GHSA-3qxm-w9c2-96j3"],"status":"published","title":"An issue in Systrome Validation \u0026 Certification 1.0 allows an attacker to cause a denial of...","description":"An issue in Systrome Validation \u0026 Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_auth.html component","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00379,"percentile":0.32395,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-1284"],"published":"2026-10-22T00:00:00Z","modified":"2026-11-02T18:42:08Z","exploits":[{"source":"pocgithub","id":"Nishi-Mehta-18/CVE-2026-107079","title":"Nishi-Mehta-18/CVE-2026-107079","date":"2026-10-22","url":"https://github.com/Nishi-Mehta-18/CVE-2026-107079"}],"references":[{"url":"https://github.com/Malav-MK/Systrome-Validation-Certification.git"},{"url":"https://github.com/Malav-MK/Systrome-Validation-Certification/blob/main/CVE-2026-107079.md","tags":["exploit"]},{"url":"https://github.com/Nishi-Mehta-18/CVE-2026-107079/blob/main/CVE-2026-107079.md"},{"url":"https://github.com/Nishi-Mehta-18/CVE-2026-107079"},{"url":"https://github.com/Malav-MK/Systrome-Validation-Certification","tags":["exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107079"},{"url":"https://github.com/advisories/GHSA-3qxm-w9c2-96j3"}],"sources":{"cve":[{"id":"CVE-2026-107079","description":"An issue in Systrome Validation \u0026 Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_auth.html component","status":"published","published":"2026-10-22T00:00:00Z","modified":"2026-11-02T18:42:08.795Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-1284"],"updated_at":"2026-11-02T19:47:06.831391Z"}],"euvd":[{"id":"EUVD-2026-108206","description":"An issue in Systrome Validation \u0026 Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_auth.html component","status":"published","published":"2026-10-22T00:00:00Z","modified":"2026-11-02T18:42:08Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T05:08:38.713005Z"}],"ghsa":[{"id":"GHSA-3qxm-w9c2-96j3","title":"An issue in Systrome Validation \u0026 Certification 1.0 allows an attacker to cause a denial of...","description":"An issue in Systrome Validation \u0026 Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_auth.html component","status":"published","published":"2026-10-22T15:32:48Z","modified":"2026-11-02T21:32:40Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-1284"],"updated_at":"2026-11-03T00:02:49.048371Z"}],"nvd":[{"id":"CVE-2026-107079","description":"An issue in Systrome Validation \u0026 Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_auth.html component","status":"published","published":"2026-10-22T14:17:37.023Z","modified":"2026-11-02T19:17:51.623Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-1284"],"updated_at":"2026-11-03T00:02:34.024265Z"}]}}