Inefficient Regular Expression Vulnerability in DiffSK Configobj by DiffSK
CVE-2026-112300

6.9MEDIUM

Key Information:

Vendor

Diffsk

Status
Configobj
Vendor
CVE Published:
19 October 2026

What is CVE-2026-112300?

A vulnerability has been discovered in DiffSK's Configobj, present in versions up to 5.0.9. This issue affects the _sectionmarker function in the file configobj/init.py, where inefficient regular expression complexity can be exploited. Successful exploitation could allow remote attackers to cause Denial of Service by manipulating input, leading to significant performance degradation. The issue has been reported to the developers, but a response has yet to be received, highlighting a potential risk for users relying on this library.

Affected Version(s)

configobj 5.0.0

configobj 5.0.1

configobj 5.0.2

References

https://vuldb.com/vuln/422346
vdb-entrytechnical-description
https://vuldb.com/vuln/422346/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-112300
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mohammedix88 (VulDB User)
VulDB CNA Team
.