CVE-2026-44796Disclosure(networktocode / nautobot)

LOWCVSS 6.5 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Patch networktocode nautobot systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot UI object-bulk-rename endpoints (for example, /dcim/interfaces/rename/) were vulnerable to application-wide denial of service via maliciously crafted regular expressions in the find field in combination with the use_regex flag. This vulnerability is fixed in 2.4.33 and 3.1.2.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-400CWE-1333

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • nautobot

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • 3 total mentions across 1 day

Affected systems

Products
nautobot

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-05-28: 3Patch / Workaround · 2026-05-28: 1Technical Details · 2026-05-28: 105-28
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-44796 Denial of Service in Nautobot UI Object-Bulk-Rename Endpoints via Malicious Regular Expressions https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44796

    Post summary

    The text announces CVE-2026-44796, a DoS vulnerability in Nautobot UI Object-Bulk-Rename endpoints triggered by malicious regex patterns, with no PoC, exploit, patch, or evidence of active exploitation.

    0000047
    4.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-44796 Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot UI object-bulk-rename endpoints (for example, /dcim/interfa… https://www.cve.org/CVERecord?id=CVE-2026-44796 ----- Traducción: CVE-2026-44796 Nau… http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-44796 for Nautobot, indicating affected versions and vulnerable UI endpoints, without providing exploitation details or mitigation steps.

    0000032
    79 followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-44796 Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot UI object-bulk-rename endpoints (for example, /dcim/interfa… https://www.cve.org/CVERecord?id=CVE-2026-44796

    Post summary

    The post notes that CVE‑2026‑44796 affects Nautobot UI object‑bulk‑rename endpoints in versions before 2.4.33 and 3.1.2, which are the patched releases.

    00000189
    57.5K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appnetworktocodenautobot---

Explore more