Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activity_timeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively large value for this parameter, causing the application to retrieve and process activity data over an arbitrarily large period. This could consume excessive database, CPU, or memory resources, delay the processing of concurrent requests, or trigger an internal server error. Repeated requests could further degrade the availability of the CTI-Transmute website. The vulnerability is corrected by clamping the requested timeline range to a minimum of one day and a maximum of 1,095 days.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-69079](https://github.com/MISP/cti-transmute/commit/321892d26b82c8a5af1e210ee30735abb10... https://github.com/MISP/cti-transmute/commit/321892d26b82c8a5af1e210ee30735abb109fac2 #Vulnerability #CVE #ZeroDay
Post summary
A new CVE (CVE‑2026‑69079) is announced with a GitHub commit link, but no further details about the vulnerability, PoC, or patch are provided.
CVE-2026-69079 Uncontrolled Resource Consumption in CTI-Transmute Activity Timeline Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-69079
Post summary
The post references CVE‑2026‑69079, identifying an uncontrolled resource consumption vulnerability in CTI‑Transmute’s Activity Timeline Endpoint, without providing PoC, exploit, or patch details.