CVE-2026-86204 in PocketMine-MPinformazioni

Riassunto

di MITRE • 09/09/2026

PocketMine-MP versions before 5.39.2 fail to limit JSON payload size in ModalFormResponsePacket handling, allowing authenticated players to cause denial of service. Attackers can send modal form response packets with massive JSON arrays to exhaust server memory and CPU resources, rendering the server unresponsive.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

VulnCheck

Prenotare

05/09/2026

Divulgazione

09/09/2026

Moderazione

accettato

CPE

pronto

EPSS

0.00000

KEV

no

Attività

molto basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-86204
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-86204
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-86204/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!