CVE-2020-36946

8.7 highEPSS 0.7%

High (8.7) in flexense syncbreeze. EPSS 0.7% chance of exploitation in the next 30 days.

SyncBreeze 10.0.28 contains a denial of service vulnerability in the login endpoint that allows remote attackers to crash the service. Attackers can send an oversized payload in the login request to overwhelm the application and potentially disrupt service availability.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-770
Published: 2026-01-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

flexense:syncbreeze

References

http://www.syncbreeze.com
https://www.exploit-db.com/exploits/49291
https://www.vulncheck.com/advisories/syncbreeze-login-denial-of-service
https://www.exploit-db.com/exploits/49291

Check your stack JSON