{"id":"CVE-2026-59613","kind":"vulnerability","aliases":["CVE-2026-59613"],"related":[],"title":"Unnamed component: out-of-bounds read lets remote attackers crash service","description":"In multiple locations, there is a possible way to trigger an out of bounds read and temporary denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"Multiple code locations fail to validate input properly, allowing an out-of-bounds memory read. A remote attacker can trigger a temporary denial of service with no privileges and no user interaction.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["other"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T20:19:31+00:00","first_seen_at":"2026-11-10T20:46:14+00:00","triaged_at":"2026-11-10T20:49:40+00:00","updated_at":"2026-11-10T20:49:40+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-11-10T20:49:40Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Unnamed component: out-of-bounds read lets remote attackers crash service","impact":"low","summary":"Multiple code locations fail to validate input properly, allowing an out-of-bounds memory read. A remote attacker can trigger a temporary denial of service with no privileges and no user interaction.","audience":"businesses","category":"other","nicknames":[],"who_cares":[],"confidence":0.4,"fix_status":"unknown","needs_auth":"no","worst_case":"Remote service crash causing temporary denial of service","analyst_note":"The affected product and versions are not named in the NVD text; find the vendor advisory for CVE-2026-59613 to identify the component and fix.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000629,"input_tokens":4519,"output_tokens":354,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-59613':15A,18A 'addit':87C 'allow':27B 'attack':10A,37B 'bound':6A,32B,65C 'code':20B 'compon':2A 'could':78C 'crash':11A 'cve':13A,16A 'denial':42B,69C,82C 'due':72C 'execut':88C 'exploit':97C 'fail':22B 'improp':74C 'input':25B,75C 'interact':51B,92C 'lead':79C 'let':8A 'locat':21B,54C 'memori':33B 'multipl':19B,53C 'need':90C,95C 'out-of-bound':3A,29B 'possibl':58C 'privileg':47B,89C 'proper':26B 'read':7A,34B,66C 'remot':9A,36B,81C 'servic':12A,44B,71C,84C 'temporari':41B,68C 'trigger':39B,61C 'unnam':1A 'user':50B,91C 'valid':24B,76C 'way':59C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["other","unknown"],"campaign_type":null,"search_a":"'-2026':14A,17A '-59613':15A,18A 'attack':10A 'bound':6A 'compon':2A 'crash':11A 'cve':13A,16A 'let':8A 'out-of-bound':3A 'read':7A 'remot':9A 'servic':12A 'unnam':1A","search_b":"'allow':27B 'attack':37B 'bound':32B 'code':20B 'denial':42B 'fail':22B 'input':25B 'interact':51B 'locat':21B 'memori':33B 'multipl':19B 'out-of-bound':29B 'privileg':47B 'proper':26B 'read':34B 'remot':36B 'servic':44B 'temporari':41B 'trigger':39B 'user':50B 'valid':24B","search_c":"'addit':87C 'bound':65C 'could':78C 'denial':69C,82C 'due':72C 'execut':88C 'exploit':97C 'improp':74C 'input':75C 'interact':92C 'lead':79C 'locat':54C 'multipl':53C 'need':90C,95C 'possibl':58C 'privileg':89C 'read':66C 'remot':81C 'servic':71C,84C 'temporari':68C 'trigger':61C 'user':91C 'valid':76C 'way':59C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:31+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-59613","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59613","severity":null,"published_at":"2026-11-10T20:19:31+00:00","modified_at":"2026-11-10T20:19:31+00:00","first_seen_at":"2026-11-10T20:46:14+00:00","fetched_at":"2026-11-10T20:46:14+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}