Vulnerability in Ercom Cryptobox
CVE-2026-5794
A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to prevent another to login by triggering an account lockout via sending a specially crafted request.
Published · last modified .
EPSS exploit prediction
EPSS: 0.004 (32.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 33rd percentile — 32.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.004 · change: +0.001
Affected products
- Ercom Cryptobox — versions 4.40.175, 4.37.237
Weakness classification (CWE)
References
- info.cryptobox.com/doc/v4.40/4.40.en/ (release-notes)