Denial of Service Vulnerability in Motor.NET by GDATASoftwareAG
CVE-2026-112330

8.7HIGH

Key Information:

Vendor

Gdatasoftwareag

Status
Motornet
Vendor
CVE Published:
22 October 2026

What is CVE-2026-112330?

Motor.NET versions prior to 0.19.0 are susceptible to a denial of service attack that enables remote attackers to permanently crash the service. By sending specially crafted messages with invalid CloudEvents headers, such as erroneous cloudEvents:motorversion or one double-quote header value, attackers can trigger unhandled exceptions in the ExtractCloudEvent function. This leads to application failure and causes the app to enter a continuous crash-loop upon restart, preventing normal operations and message processing.

Affected Version(s)

motornet 0 < 0.19.0

References

https://github.com/GDATASoftwareAG/motornet/releases/tag/...
release-notespatch
https://github.com/GDATASoftwareAG/motornet/pull/1785
issue-tracking
https://github.com/GDATASoftwareAG/motornet/commit/c45559...
patch

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Alex Williams from Pellera Technologies
.