Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users of a CryptPad instance. Fixed in 2026.2.2.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-51846 CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users of a CryptPad ins… https://www.cve.org/CVERecord?id=CVE-2025-51846
Post summary
The statement announces CVE-2025-51846, describing a WebSocket frame flood that allows remote unauthenticated attackers to cause a denial‑of‑service in CryptPad 2025.3.1.
CVE-2025-51846 Unbounded WebSocket Frame Flood Denial of Service in CryptPad 2025.3.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-51846
Post summary
A new CVE (CVE-2025-51846) for an unbounded WebSocket Frame Flood Denial of Service in CryptPad 2025.3.1 has been reported with a link to more details, but no PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | xwiki | cryptpad | - | - | - |