Regex Injection Vulnerability in Open Mercato from Open Mercato
CVE-2026-16270

6.9MEDIUM

Key Information:

Vendor: Open Mercato
Status: Open Mercato
Vendor: CVE Published:; 22 July 2026

🔔 Create Open Mercato Vulnerability Alert

What is CVE-2026-16270?

Open Mercato contains a vulnerability due to inadequate validation of regular expression rules. Attackers with permissions to create regex rules can insert malicious expressions into input fields. When a user inputs a correctly formatted string that matches the unsafe regex, it can lead to a Denial of Service (DoS) condition, disrupting the service for users. This issue was addressed in version 0.6.4.