CVE-2026-7402 - Vulnerability Analysis
HighCVSS: 8.1Last Updated: April 30, 2026
MeWare Software Development Inc. PDKS - Denial of Service
Published: April 30, 2026Updated: April 30, 2026Remote Exploitable
Overview
MeWare Software Development Inc. PDKS from V16.20200313 before VMYR_3.5.2025117 contains an improper control of interaction frequency vulnerability caused by lack of rate limiting, letting attackers perform flooding attacks, exploit requires no special privileges.
Severity & Score
Severity: High
CVSS Score: 8.1
Impact
Attackers can flood the system, causing denial of service and service disruption.
Mitigation
Update to version VMYR_3.5.2025117 or later.
Related Resources
Details
- CVE ID
- CVE-2026-7402
- Severity
- High
- CVSS Score
- 8.1
- Type
- misconfiguration
- Status
- rejected
CWE
- CWE-799
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H