{"id":"CVE-2026-43848","kind":"vulnerability","aliases":["CVE-2026-43848"],"related":[],"title":"Bulk port configuration flaw lets an unauthenticated attacker crash the service","description":"A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.","summary":"A flaw in the bulk port configuration functionality lets an unauthenticated attacker crash the affected service. The sources do not name the product or vendor, so the affected device or software is unknown.","severity":"medium","cvss":6.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["bulk-port-configuration","infrastructure"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-20T09:17:11+00:00","first_seen_at":"2026-10-23T21:57:20+00:00","triaged_at":"2026-10-25T03:40:33+00:00","updated_at":"2026-10-25T03:40:33+00:00","category":"infrastructure","confidence":0.3,"triage":{"at":"2026-10-25T03:40:33Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Bulk port configuration flaw lets an unauthenticated attacker crash the service","impact":"low","summary":"A flaw in the bulk port configuration functionality lets an unauthenticated attacker crash the affected service. The sources do not name the product or vendor, so the affected device or software is unknown.","category":"infrastructure","nicknames":[],"who_cares":["bulk-port-configuration"],"confidence":0.3,"needs_auth":"no","worst_case":"Service crashes and becomes unavailable to users","analyst_note":"Identify the affected product and vendor and the fixed version from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-43848 before publishing.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000496,"input_tokens":3253,"output_tokens":342,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-43848':14A,17A 'affect':37B,50B 'allow':65C 'attack':8A,34B,68C 'bulk':1A,19B,27B,60C 'bulk-port-configur':18B 'configur':3A,21B,29B,62C 'could':64C 'crash':9A,35B,70C 'cve':12A,15A 'devic':51B 'flaw':4A,24B 'function':30B,63C 'infrastructur':22B 'let':5A,31B 'name':43B 'port':2A,20B,28B,61C 'product':45B 'servic':11A,38B,72C 'softwar':53B 'sourc':40B 'unauthent':7A,33B,67C 'unknown':55B 'vendor':47B 'vulner':57C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T09:17:11+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"5f57b9bf-260d-4433-bf07-b6a79e9bb7d4","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-43848","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43848","severity":null,"published_at":"2026-10-20T09:17:11+00:00","modified_at":"2026-10-20T19:30:59+00:00","first_seen_at":"2026-10-23T21:57:20+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}