PT-2026-22236 · Psi Probe · Psi Probe

Ana10Gy + 1 · Published 2026-02-26 · Updated 2026-03-03 · CVE-2026-3269

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions psi-probe PSI Probe versions up to 5.3.0

Description A flaw exists in the Session Handler component of psi-probe PSI Probe. Specifically, the handleRequestInternal() function within the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/ExpireSessionsController.java is susceptible to manipulation. Successful exploitation can result in a denial of service, and the attack can be launched remotely. An exploit has been published and is potentially available for use. The vendor was notified of this issue but did not provide a response.

Recommendations Versions prior to 5.3.0 should be updated.

Exploit

Fix

DoS

Improper Resource Release

Improper Authorization

Weakness Enumeration

CWE-404

CWE-285

Related Identifiers

CVE-2026-3269

GHSA-RX6W-2W6H-R346

Affected Products

Psi Probe

References · 11

• 🔥 https://github.com/AnalogyC0de/public_exp/issues/13 · Exploit
• https://osv.dev/vulnerability/CVE-2026-3269 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-rx6w-2w6h-r346 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-3269 · Security Note
• https://github.com/psi-probe/psi-probe · Note
• https://twitter.com/CVEnew/status/2027466621217050711 · Twitter Post
• https://vuldb.com/?id.347993 · Note
• https://t.me/cveNotify/154024 · Telegram Post
• https://vuldb.com/?ctiid.347993 · Note
• https://vuldb.com/?submit.758665 · Note
• https://t.me/CVEtracker/45890 · Telegram Post