Vulnerability Description
CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activity_timeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively large value for this parameter, causing the application to retrieve and process activity data over an arbitrarily large period. This could consume excessive database, CPU, or memory resources, delay the processing of concurrent requests, or trigger an internal server error. Repeated requests could further degrade the availability of the CTI-Transmute website. The vulnerability is corrected by clamping the requested timeline range to a minimum of one day and a maximum of 1,095 days.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-69079?
CVE-2026-69079 is a documented vulnerability. CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activity_timeline endpoint. The endpoint accepts a user-controlled days query parameter that was not r...
How severe is CVE-2026-69079?
CVSS scoring is not yet available for CVE-2026-69079. Check NVD for updates.
Is there a patch for CVE-2026-69079?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.