PT-2026-41896 · Sparx Systems · Pro Cloud Server

Published 2026-05-19 · Updated 2026-06-02 · CVE-2026-42100

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Sparx Pro Cloud Server versions prior to 6.1 (build 167)

Description Improper handling of syntactically invalid structures allows a Denial of Service (DoS) attack, which is a condition where a service becomes unavailable to its intended users. This occurs when a specially crafted SQL query is sent, causing the Pro Cloud Server service to terminate unexpectedly.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Weakness Enumeration

CWE-228

Related Identifiers

CVE-2026-42100

Affected Products

Pro Cloud Server

References · 8

• 🔥 https://sploit.tech/2026/05/19/Sparx-Enterprise-Architect-PCS.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-42100 · Security Note
• https://twitter.com/CCBalert/status/2057376285249142850 · Twitter Post
• https://twitter.com/CVEnew/status/2056870233596379163 · Twitter Post
• https://twitter.com/dailycve/status/2061857399133122950 · Twitter Post
• https://cert.pl/en/posts/2026/05/CVE-2026-42096 · Note
• https://sparxsystems.com/products/procloudserver · Note
• https://efigo.pl/blog/CVE-2026-42096 · Note