Riskcovery

CVE-2026-114405

Denial of Service via Malformed VATP Packet in Velneo vServer

State
Published
Severity
8.7 High
Published
Oct 21, 2026
Updated
Oct 21, 2026
Reserved
Oct 21, 2026

Read the record on cve.org

Description

Improper validation of array index vulnerability in Velneo vServer. This issue affects vServer: from 36.0 before 36.6 and from 37.0 before 37.2.

Scores

CVSSScoreVectorSource
4.08.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:NVelneo

Weaknesses

  • CWE-129 Improper validation of array index

Affected Products

ProductVersions
vServerVelneo
  • 36.0 to before 36.6Affected
  • 37.0 to before 37.2Affected
  • 36.6Not affected
  • 37.2Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.