Denial of Service Vulnerability in pdeljanov Symphonia by pdeljanov
CVE-2026-15276

4.8MEDIUM

Key Information:

Vendor

Pdeljanov

Status
Symphonia
Vendor
CVE Published:
9 July 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-15276?

A vulnerability has been identified in pdeljanov Symphonia, specifically within the Metadata Handler component, affecting all versions up to 0.6.0. This flaw allows for a denial of service condition that can be exploited through local access. Successful exploitation could disrupt service, and a patch is pending acceptance to address the issue.

Affected Version(s)

Symphonia 0.1

Symphonia 0.2

Symphonia 0.3

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-15276 - Proof of Concept

References

https://vuldb.com/vuln/377216
vdb-entry
https://vuldb.com/vuln/377216/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-15276
third-party-advisory

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Zyz3366 (VulDB User)
VulDB CNA Team
.