Skip to content
OpenAdvisories
Medium · 4.9 CVE-2026-5794 EUVD-2026-26070GHSA-f82c-vj6w-xx38

Vulnerability in Cryptobox allows an authenticated user to trigger an account lockout

Published Apr 28, 2026 · Updated Apr 29, 2026 · Assigned by THA-PSIRT

Description

A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to prevent another to login by triggering an account lockout via sending a specially crafted request.

Affected products

VendorProductAffectedFixed
Ercom Cryptobox — 4.40.175

References