What is CVE-2020-36946?

CVE-2020-36946 is a high-severity vulnerability in Flexense Syncbreeze, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 7.5/10. Published 2026-01-27.

How severe is CVE-2020-36946?

High severity. CVSS v3 base score is 7.5 out of 10.

Resource exhaustion in Flexense Syncbreeze

CVE-2020-36946

SyncBreeze 10.0.28 contains a denial of service vulnerability in the login endpoint that allows remote attackers to crash the service. Attackers can send an oversized payload in the login request to overwhelm the application and potentiall…

EPSS: 0.006 (46.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Flexense Syncbreeze — versions 10.0.28
Flexense Ltd. Syncbreeze — versions 10.0.28

Weakness classification (CWE)

CWE-770 — Allocation of Resources Without Limits or Throttling

References

disclosure@vulncheck.com (Exploit, Third Party Advisory, exploit)
disclosure@vulncheck.com (Product, product)
disclosure@vulncheck.com (Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2020-36946?: CVE-2020-36946 is a high-severity vulnerability in Flexense Syncbreeze, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 7.5/10. Published 2026-01-27.
How severe is CVE-2020-36946?: High severity. CVSS v3 base score is 7.5 out of 10.