PT-2026-22236 · Psi Probe · Psi Probe

Ana10Gy + 1 · Publicado 2026-02-26 · Atualizado 2026-03-03 · CVE-2026-3269

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions psi-probe PSI Probe versions up to 5.3.0

Description A flaw exists in the Session Handler component of psi-probe PSI Probe. Specifically, the handleRequestInternal() function within the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/ExpireSessionsController.java is susceptible to manipulation. Successful exploitation can result in a denial of service, and the attack can be launched remotely. An exploit has been published and is potentially available for use. The vendor was notified of this issue but did not provide a response.

Recommendations Versions prior to 5.3.0 should be updated.

Exploit

Correção

DoS

Improper Resource Release

Improper Authorization

Enumeração de Fraquezas

CWE-404

CWE-285

Identificadores relacionados

CVE-2026-3269

GHSA-RX6W-2W6H-R346

Produtos afetados

Psi Probe

Referências · 11

• 🔥 https://github.com/AnalogyC0de/public_exp/issues/13 · Exploit
• https://github.com/psi-probe/psi-probe · Nota
• https://osv.dev/vulnerability/CVE-2026-3269 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-rx6w-2w6h-r346 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2027466621217050711 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-3269 · Nota de Segurança
• https://vuldb.com/?id.347993 · Nota
• https://t.me/cveNotify/154024 · Publicação no Telegram
• https://vuldb.com/?ctiid.347993 · Nota
• https://vuldb.com/?submit.758665 · Nota
• https://t.me/CVEtracker/45890 · Publicação no Telegram