SEPTEMBER 15, 2026
Live Feed
Back to database
Case File

CVE-2024-58381

HIGH · CVSS 7.5 EPSS 0.43% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-09 · Last synced 2026-09-15

CyberRota Analysis

AI-Generated

PocketMine-MP versions prior to 5.11.1 are vulnerable to a denial of service attack due to improper handling of JSON data in LoginPacket processing, allowing remote attackers to crash the server by sending malformed JSON. This vulnerability arises from incorrect object initialization that leads to unset required properties. Organizations using PocketMine-MP should prioritize patching to mitigate the risk of service disruption.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit poc
GitHub PoC Links
github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2024-58381
Severity
HIGH
CVSS
7.5
EPSS
0.43%

Original NVD Description

PocketMine-MP before 5.11.1 contains a denial of service vulnerability in LoginPacket JSON processing that allows remote attackers to crash the server by sending malformed JSON data. Attackers can exploit improper object initialization from scalar JSON types to trigger unset required properties, causing the application to crash.