EUVD-2026-34861Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from GitHub Advisory · only source for this CVE.
CVSS VectorGitHub Advisory
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
2DescriptionGitHub Advisory
Cloudburst Network provides network components used within Cloudburst projects. A vulnerability in versions prior to 1.0.0.CR3-20260417.085727-30 impacts publicly accessible software depending on the affected versions of Network and allows an attacker to exploit a vulnerability in Network to stall the netty event loop, rendering it inoperable. All consumers of the library should upgrade to at least version 1.0.0.CR3-20260417.085727-30. There are no known workarounds beyond updating the library.
AnalysisAI
Denial of service in Cloudburst Network (cloudburstmc/network) versions prior to 1.0.0.CR3-20260417.085727-30 allows remote attackers to stall the underlying Netty event loop, rendering network processing inoperable for any publicly accessible application that depends on the library. The flaw scores CVSS 7.5 with a fully remote, low-complexity, unauthenticated availability impact, and no public exploit identified at time of analysis.
Technical ContextAI
Cloudburst Network is a Netty-based networking component used by Cloudburst-family projects (the CPE cpe:2.3:a:cloudburstmc:network confirms the affected package). The root cause is mapped to CWE-770 (Allocation of Resources Without Limits or Throttling), meaning the library accepts or processes input without bounding the work performed on the Netty event loop thread. Because Netty uses a small pool of single-threaded event loops to multiplex many connections, any operation that blocks or saturates that loop halts I/O for every connection it serves - turning a single malicious peer into a service-wide stall.
RemediationAI
Vendor-released patch: upgrade the cloudburstmc/network dependency to at least 1.0.0.CR3-20260417.085727-30 as directed in the GitHub Security Advisory at https://github.com/CloudburstMC/Network/security/advisories/GHSA-7x5h-rg5x-9gf3, and rebuild and redeploy every downstream service that embeds the library (transitive dependencies must be checked, not just direct ones). The advisory explicitly states there are no known workarounds, so compensating controls are limited to reducing exposure of the network listener - restrict the affected service to trusted source IP ranges at the firewall or load balancer, and place upstream rate-limiting or connection-throttling in front of the Netty listener to slow a single peer's ability to saturate the event loop; these reduce but do not eliminate risk and may degrade legitimate clients under load.
Versions of the package network before 0.7.0 are vulnerable to Arbitrary Command Injection due to use of the child_proce
Vulnerability in Fidelis Network and Deception CommandPost enables unauthenticated SQL injection through the web interfa
Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web inter
Vulnerability in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker
User credentials stored in a recoverable format within Fidelis Network and Deception CommandPost. Rated high severity (C
Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web inter
Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web inter
Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web inter
Vulnerability in Fidelis Network and Deception CommandPost enables SQL injection through the web interface by an attacke
Vulnerability in rconfig “remote_text_file” enables an attacker with user level access to the CLI to inject user level c
Vulnerability in rconfig “cert_utils” enables an attacker with user level access to the CLI to inject root level command
Vulnerability in rconfig “date” enables an attacker with user level access to the CLI to inject root level commands into
Same technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today