CVE-2026-22542
An attacker with access to the system's internal network can cause a denial of service on the system by making two concurrent connections through the Telnet service.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.2
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
- EPSS probability
- 0.37%
- CWE
- CWE-400
- Published
- 2026-01-07
- Last modified
- 2026-03-12
Affected products
- EFACEC QC 60/90/120
Weakness type
Related vulnerabilities
- CVE-2026-87908 — multiparty vulnerable to Denial of Service via unbounded part-header accumulation
- CVE-2026-45769 — ikev2: unbounded client transform storage can lead to resource exhaustion
- CVE-2026-45768 — Suricata ldap: unbounded responses per transaction can lead to resource exhaustion
- CVE-2026-45766 — Suricata nfs: unbounded stateful structures can lead to resource exhaustion
- CVE-2026-45765 — Suricata dnp3: unbounded reassembly can lead to resource exhaustion
- CVE-2026-45759 — Suricata http1: quadratic Content-Disposition processing can lead to denial of service
- CVE-2026-87106 — Consul vulnerable to a denial of service in the native RPC listener
- CVE-2026-9338 — IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities