CVE-2026-5794

A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to prevent another to login by triggering an account lockout via sending a specially crafted request.

Score

CVSS 4.0 4.9 Medium

Status

Awaiting Analysis - psirt@thalesgroup.com

Published

2026-04-28

Last modified

2026-10-26

Weaknesses

CWE-694

Affected products

• Cryptobox (Ercom)

References

• https://info.cryptobox.com/doc/v4.40/4.40.en/