What’s Vulnerable › Vulnerabilities

CVE-2020-36946: SyncBreeze 10.0.28 - 'login' Denial of Service

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-01-27 · updated 2026-06-17
• Weakness: CWE-770

Description

SyncBreeze 10.0.28 contains a denial of service vulnerability in the login endpoint that allows remote attackers to crash the service. Attackers can send an oversized payload in the login request to overwhelm the application and potentially disrupt service availability.

Affected products

• SyncBreeze: 10.0.28

References

• http://www.syncbreeze.com
• https://www.exploit-db.com/exploits/49291
• https://www.vulncheck.com/advisories/syncbreeze-login-denial-of-service
• https://www.exploit-db.com/exploits/49291

Get alerted when CVE-2020-36946 or the next vulnerability affects your stack