What is the CVSS score of CVE-2026-24831?

CVE-2026-24831 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.1%.

Which versions of Ix Ray Engine 1.6 are affected by CVE-2026-24831?

CVE-2026-24831 is a high-severity infinite loop vulnerability affecting ixray-1.6-stcop versions before 1.3 that could enable denial-of-service attacks against systems running this software.

How to fix or mitigate CVE-2026-24831?

Within 24 hours: Inventory all systems running ixray-1.6-stcop and determine version numbers; assess business criticality of affected assets. Within 7 days: Implement network segmentation and access controls to restrict input sources to the vulnerable application; enable enhanced monitoring for infinite loop indicators (CPU spikes, hung processes). Within 30 days: Contact vendor for patch timeline; evaluate alternative solutions or upgrade paths; develop runbooks for rapid service restart if infinite loops are triggered.

Ix Ray Engine 1.6 CVE-2026-24831

HIGH

Loop with Unreachable Exit Condition (Infinite Loop) (CWE-835)

2026-01-27 cve_disclosure@tech.gov.sg

Denial Of Service Ix Ray Engine 1.6

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Jan 27, 2026 - 16:16 nvd

HIGH 7.5

DescriptionCVE.org

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in ixray-team ixray-1.6-stcop.This issue affects ixray-1.6-stcop: before 1.3.

AnalysisAI

Ix Ray Engine 1.6 before version 1.3 contains an infinite loop vulnerability that allows remote attackers to cause denial of service without authentication or user interaction. The flaw stems from an unreachable exit condition in a processing loop, enabling attackers to exhaust system resources and render the application unresponsive. No patch is currently available for this high-severity issue.

Technical ContextAI

Classified as CWE-835 (Loop with Unreachable Exit Condition (Infinite Loop)). Affects Ix-Ray Engine 1.6. Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in ixray-team ixray-1.6-stcop.This issue affects ixray-1.6-stcop: before 1.3.