CVE-2026-57576

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

• ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
• AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
• Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.76% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 55.0% of scored records. A rank, not a probability.

NVD base score

6.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Awaiting Analysis. NVD last modified this record on 2026-09-26.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2026-09-22 23:01Z1 MO AGO

Last updated

2026-09-26 00:12Z1 MO AGO

Reserved

2026-06-24

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

Medium (CVSS 6.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses

• CWE-400Uncontrolled Resource ConsumptionClass

Data version

5.2

Document digest

3cd6b795821b733d07567f461e31d1d4b88243f98c2302532b972e9691bba392

• github.comhttps://github.com/plone/plone.app.dexterity/security/advisories/GHSA-5426-92w4-wvhvx_refsource_CONFIRM
• github.comhttps://github.com/plone/plone.app.contenttypes/security/advisories/GHSA-8pcw-h6w9-h46gx_refsource_MISC
• github.comhttps://github.com/plone/plone.app.contenttypes/commit/13dc98a578341aac24a1e65fd9bc7ac8a07d168ax_refsource_MISC
• github.comhttps://github.com/plone/plone.app.contenttypes/commit/21bae6ebe424689eeac9a5884fc0da35f4944e63x_refsource_MISC
• github.comhttps://github.com/plone/plone.app.contenttypes/commit/639c0619f371df578e69ec94e5ca98e60fd6ed58x_refsource_MISC
• github.comhttps://github.com/plone/plone.app.contenttypes/commit/7bb03e8ec6c6bd0e645f445b0755e85a51afb158x_refsource_MISC
• github.comhttps://github.com/plone/plone.app.contenttypes/commit/bed1547d4f8b1fc995f2c76f30ba5f20276a8ad6x_refsource_MISC
• github.comhttps://github.com/plone/plone.app.dexterity/commit/0d317df663823445200d0569a66a95b7e4a9c50dx_refsource_MISC
• github.comhttps://github.com/plone/plone.app.dexterity/commit/2fdceb120ca86682a408f3a14753cfcf5126d9d9x_refsource_MISC
• github.comhttps://github.com/plone/plone.app.dexterity/commit/411689047f9a3521899ae6992a9b0efbd0592a8fx_refsource_MISC
• github.comhttps://github.com/plone/plone.app.dexterity/commit/cbcef731c0882146b9bf30688cdc639d879878fbx_refsource_MISC
• github.comhttps://github.com/plone/plone.app.dexterity/commit/f3596538cf7670bb8bc27b0dfa0b1da41c8b8a3ax_refsource_MISC
• github.comhttps://github.com/plone/plone.app.dexterity/commit/fb45bfdb18f1dfb3ed55e477947a3df9a6ee9e20x_refsource_MISC