What’s Vulnerable › Vulnerabilities

CVE-2025-8696: DoS attack against the Stork UI from an unauthenticated user

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-10 · updated 2026-09-26
• Weakness: CWE-779

Description

If an unauthenticated user sends a large amount of data to the Stork UI, it may cause memory and disk use problems for the system running the Stork server. This issue affects Stork versions 1.0.0 through 2.3.0.

Affected products

• ISC Stork: from 1.0.0 through 2.3.0

References

• https://kb.isc.org/docs/cve-2025-8696
• http://www.openwall.com/lists/oss-security/2025/09/10/5

Get alerted when CVE-2025-8696 or the next vulnerability affects your stack