VulnSocial

CVE-2026-3816Disclosure(owasp / defectdojo)

LOWCVSS 6.5 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4. This vulnerability affects the function input_zip.read of the file parser.py of the component SonarQubeParser/MSDefenderParser. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 2.56.0 is able to resolve this issue. The identifier of the patch is e8f1e5131535b8fd80a7b1b3085d676295fdcd41. Upgrading the affected component is recommended.

owasp CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-404CWE-1284

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • defectdojo

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 3 classified signals
  • 3 total mentions across 1 day

Affected systems

Vendors
owasp
Products
defectdojo

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-03-09: 3Technical Details · 2026-03-09: 203-09
Signal classification1 categories
Disclosure
3100.0%
Referenced assets5 URLs
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-3816 Denial of Service Vulnerability in OWASP DefectDojo Input Zip Pars... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3816 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1

    Post summary

    The tweet announces a new Denial of Service vulnerability (CVE-2026-3816) in OWASP DefectDojo's Input Zip Parser, providing a link for further details but no Proof of Concept, exploit, patch, or active exploitation claim.

    0001044
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-3816 A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4. This vulnerability affects the function input_zip.read of the file http://parser.py of the compone… https://www.cve.org/CVERecord?id=CVE-2026-3816

    Post summary

    The passage announces that CVE-2026-3816 was detected in OWASP DefectDojo, affecting the input_zip.read function in parser.py, with no additional technical or mitigation details provided.

    0000086
    56.6K followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    Disclosure

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3816 - OWASP DefectDojo SonarQubeParser/MSDefenderParser http://parser.py input_zip.read denial of service Intel Report: https://ift.tt/VptR3P7

    Post summary

    The message announces CVE-2026-3816 as a denial‑of‑service vulnerability affecting OWASP DefectDojo parsers, providing basic technical details but no PoC, exploit code, or patch information.

    0000027
    347 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appowaspdefectdojo---

Explore more

Back to dashboardowasp CVEsdefectdojo vulnerabilities