What is CVE-2026-19745?

CVE-2026-19745 is a medium-severity vulnerability, classified under Improper Resource Shutdown or Release. CVSS score: 4.3/10. Published 2026-08-13.

How severe is CVE-2026-19745?

Medium severity. CVSS v3 base score is 4.3 out of 10.

CVE-2026-19745

CVE-2026-19745

A flaw has been found in Calix GigaSpire 26.1.0. Impacted is an unknown function of the file utilities_configurationsave.cgi of the component Web Management Interface. Executing a manipulation of the argument sessionKey can lead to denial of service. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.

Weakness classification (CWE)

CWE-404 — Improper Resource Shutdown or Release

References

cna@vuldb.com (technical-description, vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-19745?: CVE-2026-19745 is a medium-severity vulnerability, classified under Improper Resource Shutdown or Release. CVSS score: 4.3/10. Published 2026-08-13.
How severe is CVE-2026-19745?: Medium severity. CVSS v3 base score is 4.3 out of 10.