CVE-2026-51788

Denial of Service via Uncontrolled Resource Consumption in cleverange_auth

Published Sep 1, 2026 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
An issue in cleverange_auth v.0.1.10 allows a remote attacker to cause a denial of service via the account_verification function and the accounts/models.py component

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Title Denial of Service via Uncontrolled Resource Consumption in cleverange_auth
Type Values Removed Values Added
Weaknesses CWE-400
Metrics cvssV3_1

{'score': 3.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N'}

cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Type Values Removed Values Added
Title Denial of Service via Account Verification in cleverange_auth
Weaknesses CWE-400
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 3.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Title Denial of Service via Account Verification in cleverange_auth
Weaknesses CWE-400
Type Values Removed Values Added
Description An issue in cleverange_auth v.0.1.10 allows a remote attacker to cause a denial of service via the account_verification function and the accounts/models.py component
References

Subscriptions

No data.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Sep 3, 2026, 4:34 PM
Reserved
Jun 8, 2026, 12:00 AM
Status
Deferred
Published
Sep 1, 2026, 5:17 PM
Modified
Sep 3, 2026, 5:17 PM