Live › vulnerability › CVE-2026-114405
Go to dashboardVelneo vServer versions 36.0 before 36.6 and 37.0 before 37.2 do not validate an array index properly. The sources do not say what an attacker can do with it or whether it needs credentials.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Check the installed vServer version against 36.0 to 36.6 and 37.0 to 37.2 (unknown how to read it from the product).
Upgrade vServer to 36.6 or later for the 36 line, or 37.2 or later for the 37 line.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper validation of array index vulnerability in Velneo vServer. This issue affects vServer: from 36.0 before 36.6 and from 37.0 before 37.2.
This page as .md · .json · in your agent: get_signal("CVE-2026-114405")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.