What is CVE-2026-66749?

CVE-2026-66749 is a medium-severity vulnerability in Sdelements Lets-chat, classified under NULL Pointer Dereference. CVSS score: 6.5/10. Published 2026-07-28.

How severe is CVE-2026-66749?

Medium severity. CVSS v3 base score is 6.5 out of 10.

NULL pointer dereference in Sdelements Lets-chat

CVE-2026-66749

Let's Chat 0.4.0 through 0.4.8 contains a null dereference vulnerability that allows authenticated attackers to crash the server by supplying a valid 24-character hex string room parameter that matches no document in the database. Attacker…

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Sdelements Lets-chat — versions 0.4.0, 84981a6d2534445c00ea4e095c934e46943c0b1d

Weakness classification (CWE)

CWE-476 — NULL Pointer Dereference

References

disclosure@vulncheck.com (technical-description, exploit)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-66749?: CVE-2026-66749 is a medium-severity vulnerability in Sdelements Lets-chat, classified under NULL Pointer Dereference. CVSS score: 6.5/10. Published 2026-07-28.
How severe is CVE-2026-66749?: Medium severity. CVSS v3 base score is 6.5 out of 10.