PT-2026-26952 · Deluge · Deluge

Victor Mondragón · Publicado 2026-03-22 · Atualizado 2026-03-22 · CVE-2019-25586

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Deluge version 1.3.15

Description A denial of service issue exists in Deluge that allows local attackers to crash the application. This occurs when an excessively long string is provided in the URL field. Specifically, attackers can paste a 5000-character buffer into the 'From URL' field during torrent addition, leading to an application crash.

Recommendations Update to a newer version of Deluge that addresses this issue. As a temporary workaround, limit the length of the input allowed in the 'From URL' field.

Exploit

Correção

Enumeração de Fraquezas

CWE-466

Identificadores relacionados

CVE-2019-25586

PYSEC-2026-39

Produtos afetados

Deluge

Referências · 11

• 🔥 https://exploit-db.com/exploits/46883 · Exploit
• https://dev.deluge-torrent.org · Nota
• https://cve.org/CVERecord?id=CVE-2019-25586 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2019-25586 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-25586 · Aviso do Fabricante
• http://download.deluge-torrent.org/windows/deluge-1.3.15-win32-py2.7.exe · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-25586 · Aviso do Fabricante
• https://osv.dev/vulnerability/PYSEC-2026-39 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-25586 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-25586 · Nota de Segurança
• https://vulncheck.com/advisories/deluge-denial-of-service-via-url-field · Nota