NetworkSleuth 3.0.0.0 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 4.6 · nsasoftNVD modified 2026-10-27 01:30
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.
References 3
- https://www.exploit-db.com/exploits/47853 exploit
- http://www.nsauditor.com/ product
- https://www.vulncheck.com/advisories/networksleuth-key-denial-of-service third-party-advisory