CVE-2026-16218

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-16218", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-07-18T09:55:57.419Z", "datePublished": "2026-07-19T05:45:08.349Z", "dateUpdated": "2026-07-20T13:57:18.074Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-07-19T05:45:08.349Z"}, "title": "hunvreus devpush Storage Reset Failure storage.py reset_storage improper check or handling of exceptional conditions", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-703", "lang": "en", "description": "Improper Check or Handling of Exceptional Conditions"}]}], "affected": [{"vendor": "hunvreus", "product": "devpush", "versions": [{"version": "0.4.0", "status": "affected"}, {"version": "0.4.1", "status": "affected"}, {"version": "0.4.2", "status": "affected"}, {"version": "0.4.3", "status": "affected"}, {"version": "0.4.4", "status": "affected"}, {"version": "0.4.5", "status": "affected"}, {"version": "0.4.6", "status": "affected"}], "cpes": ["cpe:2.3:a:hunvreus:devpush:*:*:*:*:*:*:*:*"], "modules": ["Storage Reset Failure Handler"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function reset_storage of the file app/workers/tasks/storage.py of the component Storage Reset Failure Handler. The manipulation results in improper check or handling of exceptional conditions. A high complexity level is associated with this attack. The exploitation is known to be difficult. The project was informed of the problem early through an issue report but has not responded yet."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 2.1, "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X", "baseSeverity": "LOW"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 2.6, "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:X/RL:X/RC:R", "baseSeverity": "LOW"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 2.6, "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:X/RL:X/RC:R", "baseSeverity": "LOW"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 1.4, "vectorString": "AV:A/AC:H/Au:S/C:N/I:P/A:N/E:ND/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-07-18T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-07-18T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-07-18T12:01:04.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "GalaxynX (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/380041", "name": "VDB-380041 | hunvreus devpush Storage Reset Failure storage.py reset_storage improper check or handling of exceptional conditions", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/380041/cti", "name": "VDB-380041 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-16218", "name": "CVE-2026-16218 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/857951", "name": "Submit #857951 | hunvreus devpush d67a99b62b3e2b044f1e0e9b06a3296fe1939fe3 CWE-703 Improper Check or Handling of Exceptional Conditions", "tags": ["third-party-advisory"]}, {"url": "https://github.com/hunvreus/devpush/issues/69", "tags": ["issue-tracking"]}, {"url": "https://github.com/hunvreus/devpush/", "tags": ["product"]}]}, "adp": [{"references": [{"url": "https://github.com/hunvreus/devpush/issues/69", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-20T13:56:56.035215Z", "id": "CVE-2026-16218", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-20T13:57:18.074Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-16218", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-20T13:56:56.035215Z"}}}], "references": [{"url": "https://github.com/hunvreus/devpush/issues/69", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-20T13:57:13.975Z"}}], "cna": {"title": "hunvreus devpush Storage Reset Failure storage.py reset_storage improper check or handling of exceptional conditions", "credits": [{"lang": "en", "type": "reporter", "value": "GalaxynX (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 2.1, "baseSeverity": "LOW", "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 2.6, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:X/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 2.6, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:X/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 1.4, "vectorString": "AV:A/AC:H/Au:S/C:N/I:P/A:N/E:ND/RL:ND/RC:UR"}}], "affected": [{"cpes": ["cpe:2.3:a:hunvreus:devpush:*:*:*:*:*:*:*:*"], "vendor": "hunvreus", "modules": ["Storage Reset Failure Handler"], "product": "devpush", "versions": [{"status": "affected", "version": "0.4.0"}, {"status": "affected", "version": "0.4.1"}, {"status": "affected", "version": "0.4.2"}, {"status": "affected", "version": "0.4.3"}, {"status": "affected", "version": "0.4.4"}, {"status": "affected", "version": "0.4.5"}, {"status": "affected", "version": "0.4.6"}]}], "timeline": [{"lang": "en", "time": "2026-07-18T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-07-18T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-07-18T12:01:04.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/380041", "name": "VDB-380041 | hunvreus devpush Storage Reset Failure storage.py reset_storage improper check or handling of exceptional conditions", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/380041/cti", "name": "VDB-380041 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-16218", "name": "CVE-2026-16218 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/857951", "name": "Submit #857951 | hunvreus devpush d67a99b62b3e2b044f1e0e9b06a3296fe1939fe3 CWE-703 Improper Check or Handling of Exceptional Conditions", "tags": ["third-party-advisory"]}, {"url": "https://github.com/hunvreus/devpush/issues/69", "tags": ["issue-tracking"]}, {"url": "https://github.com/hunvreus/devpush/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function reset_storage of the file app/workers/tasks/storage.py of the component Storage Reset Failure Handler. The manipulation results in improper check or handling of exceptional conditions. A high complexity level is associated with this attack. The exploitation is known to be difficult. The project was informed of the problem early through an issue report but has not responded yet."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-703", "description": "Improper Check or Handling of Exceptional Conditions"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-07-19T05:45:08.349Z"}}}, "cveMetadata": {"cveId": "CVE-2026-16218", "state": "PUBLISHED", "dateUpdated": "2026-07-20T13:57:18.074Z", "dateReserved": "2026-07-18T09:55:57.419Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-07-19T05:45:08.349Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:hunvreus:devpush:*:*:*:*:*:*:*:*"], "modules": ["Storage Reset Failure Handler"], "product": "devpush", "vendor": "hunvreus", "versions": [{"status": "affected", "version": "0.4.0"}, {"status": "affected", "version": "0.4.1"}, {"status": "affected", "version": "0.4.2"}, {"status": "affected", "version": "0.4.3"}, {"status": "affected", "version": "0.4.4"}, {"status": "affected", "version": "0.4.5"}, {"status": "affected", "version": "0.4.6"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function reset_storage of the file app/workers/tasks/storage.py of the component Storage Reset Failure Handler. The manipulation results in improper check or handling of exceptional conditions. A high complexity level is associated with this attack. The exploitation is known to be difficult. The project was informed of the problem early through an issue report but has not responded yet."}, {"lang": "es", "value": "Se detect\u00f3 una vulnerabilidad en hunvreus devpush hasta 0.4.6. Afectada por este problema est\u00e1 la funci\u00f3n reset_storage del archivo app/workers/tasks/storage.py del componente Gestor de Fallos de Reinicio de Almacenamiento. La manipulaci\u00f3n resulta en una comprobaci\u00f3n o gesti\u00f3n inadecuada de condiciones excepcionales. Un alto nivel de complejidad est\u00e1 asociado con este ataque. Se sabe que la explotaci\u00f3n es dif\u00edcil. Se inform\u00f3 al proyecto del problema con antelaci\u00f3n a trav\u00e9s de un informe de problema, pero a\u00fan no ha respondido."}], "id": "CVE-2026-16218", "lastModified": "2026-10-24T20:10:00.137", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "HIGH", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 1.4, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:H/Au:S/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 2.5, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 2.6, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-16218", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-07-20T13:56:56.035215Z", "version": "2.0.3"}}]}, "published": "2026-07-19T06:17:10.067", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/hunvreus/devpush/"}, {"source": "cna@vuldb.com", "url": "https://github.com/hunvreus/devpush/issues/69"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/cve/CVE-2026-16218"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/857951"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/380041"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/380041/cti"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/hunvreus/devpush/issues/69"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-703"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.4.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.4.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.4.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.4.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.4.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.4.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.4.6"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "devpush", "source": "cna", "vendor": "hunvreus"}, "product": "devpush", "vendor": "hunvreus"}], "created": "2026-07-21T00:30:18.756959+00:00", "updated": "2026-07-30T22:45:04.016383+00:00", "vendors": ["hunvreus", "hunvreus$PRODUCT$devpush"]}