CVE-2026-3269mediumCWE-404

CVE-2026-3269: medium-severity vulnerability in psi-probe PSI Probe

psi-probe PSI Probe Session ExpireSessionsController.java handleRequestInternal denial of service

Published · Updated

Follow this CVE+ Monitor PSI Probe+ Monitor com.github.psi-probe:psi-probe-core

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.6%
A flaw has been found in psi-probe PSI Probe up to 5.3.0. The impacted element is the function handleRequestInternal of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/ExpireSessionsController.java of the component Session Handler. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
psi-probe · PSI Probe
Related CVEs — psi-probe PSI Probe

In the same product, most dangerous first.

CVE-2026-3270MEDIUMpsi-probe PSI Probe Whois Whois.java lookup server-side request forgeryEPSS 0.4%CVE-2026-3268MEDIUMpsi-probe PSI Probe Session Attribute RemoveSessAttributeController.java access controlEPSS 0.3%