Denial-of-Service and Brute-Force Vulnerability in WebSocket API by Vendor

CVE-2026-97363

What is CVE-2026-97363?

The WebSocket Application Programming Interface is vulnerable to security risks due to the lack of restrictions on the number of authentication requests. This vulnerability can be exploited by attackers to perform denial-of-service attacks or to execute brute-force attempts, potentially leading to unauthorized access to the system. Implementing rate limiting is essential to mitigate these risks and protect the integrity of the application.

References