Back to overview

CVE-2026-15276

LOW
3.3
CVSS 3.1
Description
A flaw has been found in pdeljanov Symphonia up to 0.6.0. This vulnerability affects unknown code of the component Metadata Handler. This manipulation causes denial of service. The attack needs to be launched locally. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.

Metadata

CVE ID
CVE-2026-15276
State
PUBLISHED
Assigner
VulDB
Reserved
2026-07-09 15:02 UTC
Published
2026-07-09 22:00 UTC
Last updated
2026-07-09 22:00 UTC
Primary CWE
CWE-404
Denial of Service
Vendor / Product
pdeljanov / Symphonia
Sources
cve.org  ·  NVD

Severity & Metrics

3.3 LOW CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R
Affected products (1)
VendorProductPlatformVersions
pdeljanov Symphonia — 0.1, 0.2, 0.3, 0.4 …
Weakness (CWE)
CWESourceDescription
CWE-404 cna Denial of Service
CVSS scores (4)
ScoreSeverityVersionSourceVector
4.8 MEDIUM 4.0 cna CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
3.3 LOW 3.1 cna CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R
3.3 LOW 3.0 cna CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R
1.7 N/D 2.0 cna AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR
References (7)
Back to overview