CVE-2026-126784mediumCWE-770

CVE-2026-126784: medium-severity vulnerability in XauenDevs Lagarto Chivato

Uncontrolled resource consumption via post_notice

Published

Follow this CVE+ Monitor Lagarto Chivato

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.4%
Missing rate limiting, per-account submission quota and geographic validation in the publicar_aviso RPC function in Lagarto Chivato 0.4.1 and earlier on Web allows remote authenticated attackers to flood the moderation queue via unlimited submission of notices with arbitrary coordinates.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Affected products
XauenDevs · Lagarto Chivato
Related CVEs — XauenDevs Lagarto Chivato

In the same product, most dangerous first.

CVE-2026-126815HIGHPre-account hijacking via planted passwordEPSS 0.5%