Description
Missing rate limiting, per-account submission quota and geographic validation in the publicar_aviso RPC function in Lagarto Chivato 0.4.1 and earlier on Web allows remote authenticated attackers to flood the moderation queue via unlimited submission of notices with arbitrary coordinates.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| XauenDevs | Lagarto Chivato | unaffected |
|
No data.
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
Wed, 11 Nov 2026 19:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Missing rate limiting, per-account submission quota and geographic validation in the publicar_aviso RPC function in Lagarto Chivato 0.4.1 and earlier on Web allows remote authenticated attackers to flood the moderation queue via unlimited submission of notices with arbitrary coordinates. | |
| Title | Uncontrolled resource consumption via post_notice | |
| First Time appeared |
Xauendevs
Xauendevs lagarto Chivato |
|
| Weaknesses | CWE-770 | |
| CPEs | cpe:2.3:a:xauendevs:lagarto_chivato:*:*:*:*:*:*:*:* cpe:2.3:a:xauendevs:lagarto_chivato:0.4.4:*:*:*:*:*:*:* |
|
| Vendors & Products |
Xauendevs
Xauendevs lagarto Chivato |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: Grayback
Published:
Updated: 2026-11-11T19:32:12.829Z
Reserved: 2026-11-11T19:14:35.966Z
Link: CVE-2026-126784
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses
-
CWE-770
Allocation of Resources Without Limits or Throttling