Missing rate limiting, per-account submission quota and geographic validation in the publicar_aviso RPC function in Lagarto Chivato 0.4.1 and earlier on Web allows remote authenticated attackers to flood the moderation queue via unlimited submission of notices with arbitrary coordinates.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| XauenDevs | Lagarto Chivato | unaffected |
|
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 11 Nov 2026 19:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Missing rate limiting, per-account submission quota and geographic validation in the publicar_aviso RPC function in Lagarto Chivato 0.4.1 and earlier on Web allows remote authenticated attackers to flood the moderation queue via unlimited submission of notices with arbitrary coordinates. | |
| Title | Uncontrolled resource consumption via post_notice | |
| First Time appeared |
Xauendevs
Xauendevs lagarto Chivato |
|
| Weaknesses | CWE-770 | |
| CPEs | cpe:2.3:a:xauendevs:lagarto_chivato:*:*:*:*:*:*:*:* cpe:2.3:a:xauendevs:lagarto_chivato:0.4.4:*:*:*:*:*:*:* |
|
| Vendors & Products |
Xauendevs
Xauendevs lagarto Chivato |
|
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: Grayback
Published:
Updated: 2026-11-11T19:32:12.829Z
Reserved: 2026-11-11T19:14:35.966Z
Link: CVE-2026-126784
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses