Live › vulnerability › CVE-2026-50787
Go to dashboarde-SIC Livre v0.2.2 and earlier takes unchecked parameters (l, a, tf, ql) in restrito/inc/captcha.php to size CAPTCHA images. A remote attacker can send oversized values to make the server consume excessive memory and CPU, causing denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running e-SIC Livre v0.2.2 or earlier that expose the restrito/inc/captcha.php endpoint to the internet. The sources do not say whether a default install exposes it or whether authentication is required to reach it.
No product ranges from the sources yet.
restrito/inc/captcha.php in the e-SIC Livre install and confirm the installed version with the project's version fileEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
e-SIC Livre (esiclivre) v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/captcha.php. The application uses user-supplied parameters (l, a, tf, ql) without validation to generate CAPTCHA images, allowing remote attackers to cause denial of service via excessive memory and CPU consumption.
This page as .md · .json · in your agent: get_signal("CVE-2026-50787")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.