{"id":"CVE-2026-58937","kind":"vulnerability","aliases":["CVE-2026-58937"],"related":[],"title":"Unnamed product: input validation flaw allows persistent local denial of service","description":"In multiple locations, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"Improper input validation in multiple locations of an unnamed product can cause a persistent denial of service. The sources say an attacker with local access and no extra privileges can trigger it, without user interaction.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["other"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T20:17:50+00:00","first_seen_at":"2026-11-02T20:35:33+00:00","triaged_at":"2026-11-02T20:38:44+00:00","updated_at":"2026-11-02T20:38:44+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-11-02T20:38:44Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Unnamed product: input validation flaw allows persistent local denial of service","impact":"low","summary":"Improper input validation in multiple locations of an unnamed product can cause a persistent denial of service. The sources say an attacker with local access and no extra privileges can trigger it, without user interaction.","audience":"businesses","category":"other","nicknames":[],"who_cares":[],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Persistent local denial of service; service stays down until repaired","analyst_note":"Identify the affected product and versions from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-58937 before anything else can be filled in.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000583,"input_tokens":4069,"output_tokens":352,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-58937':14A,17A 'access':42B 'addit':79C 'allow':6A 'attack':39B 'caus':29B 'could':70C 'cve':12A,15A 'denial':9A,32B,61C,74C 'due':64C 'execut':80C 'exploit':89C 'extra':45B 'flaw':5A 'improp':18B,66C 'input':3A,19B,67C 'interact':52B,84C 'lead':71C 'local':8A,41B,73C 'locat':23B,55C 'multipl':22B,54C 'need':82C,87C 'persist':7A,31B,60C 'possibl':59C 'privileg':46B,81C 'product':2A,27B 'say':37B 'servic':11A,34B,63C,76C 'sourc':36B 'trigger':48B 'unnam':1A,26B 'user':51B,83C 'valid':4A,20B,68C 'without':50B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["other","unknown"],"first_public_at":"2026-11-02T20:17:50+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-58937","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58937","severity":null,"published_at":"2026-11-02T20:17:50+00:00","modified_at":"2026-11-02T20:17:50+00:00","first_seen_at":"2026-11-02T20:35:33+00:00","fetched_at":"2026-11-02T20:35:33+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}