Critical (9.8). EPSS 12% chance of exploitation in the next 30 days.
The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.
Severity
CVSS 3.1
9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
12% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)