Vulnerability Description
A denial-of-service vulnerability caused by unbounded resource allocation was discovered in the audit logging functionality, due to a missing size limit on input recorded into audit entries. An unauthenticated attacker can submit requests containing excessively large input that is recorded into audit entries, possibly exhausting the available disk space and rendering the system inoperable.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nozominetworks | Cmc | < 26.2.0 |
| Nozominetworks | Guardian | < 26.2.0 |
Related Weaknesses (CWE)
References
- https://security.nozominetworks.com/NN-2026:11-01MitigationVendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-827968.html
FAQ
What is CVE-2026-31984?
CVE-2026-31984 is a vulnerability with a CVSS score of 7.5 (HIGH). A denial-of-service vulnerability caused by unbounded resource allocation was discovered in the audit logging functionality, due to a missing size limit on input recorded into audit entries. An unauth...
How severe is CVE-2026-31984?
CVE-2026-31984 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-31984?
Check the references section above for vendor advisories and patch information. Affected products include: Nozominetworks Cmc, Nozominetworks Guardian.