SEPTEMBER 23, 2026
Live Feed
Back to database
Case File

CVE-2026-6948

MEDIUM · CVSS 4.9 EPSS 0.34%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-05-04 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.9. See the original NVD description below for full technical details.

CVE
CVE-2026-6948
Severity
MEDIUM
CVSS
4.9
EPSS
0.34%

Original NVD Description

Velociraptor versions prior to 0.76.4 contain a resource exhaustion vulnerability in the server's agent control channel. This allows a compromised or rogue Velociraptor client to crash the server via out-of-memory (OOM) by sending crafted messages through the normal client communication channel.