Improper Validation Vulnerability in Velneo vServer by Velneo
CVE-2026-114405

8.7HIGH

Key Information:

Vendor

Velneo

Status
Vserver
Vendor
CVE Published:
21 October 2026

What is CVE-2026-114405?

An improper validation of array index vulnerability in Velneo vServer may allow an attacker to manipulate server operations. The affected versions include vServer from 36.0 prior to 36.6 and from 37.0 prior to 37.2. This vulnerability can result in unintended behavior, which could compromise system stability and security. It is crucial for users to upgrade to the latest versions to mitigate potential risks.

Affected Version(s)

vServer 36.0 < 36.6

vServer 37.0 < 37.2

vServer 36.6

References

https://velneo.es/avisos-de-seguridad/
vendor-advisorypatch

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Luis Sobrecueva
.