{"affected":[{"defaultStatus":"unaffected","product":"Lagarto Chivato","source":"CNA: Grayback","vendor":"XauenDevs","versions":[{"lessThanOrEqual":"0.4.1","status":"affected","version":"0.1.0","versionType":"custom"},{"status":"unaffected","version":"0.4.4"}]}],"cveId":"CVE-2026-126784","cwes":["CWE-770"],"description":"Missing rate limiting, per-account submission quota and geographic validation in the publicar_aviso RPC function in Lagarto Chivato 0.4.1 and earlier on Web allows remote authenticated attackers to flood the moderation queue via unlimited submission of notices with arbitrary coordinates.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":4.3,"severity":"medium","source":"CNA: Grayback","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","version":"3.1"}],"modifiedAt":1794425532829,"publishedAt":1794425532829,"references":[{"source":"CNA: Grayback","tags":["patch"],"url":"https://www.grayback.es/advisories"},{"source":"CNA: Grayback","tags":["patch"],"url":"https://www.grayback.es/en/advisories"}],"remediation":[{"kind":"fix","source":"CNA: Grayback","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.grayback.es/advisories"},{"kind":"fix","source":"CNA: Grayback","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.grayback.es/en/advisories"}],"revision":"72c673923e106b88e492d0a7becc03836bcec3954ca8f7d92edc00129078d670","sources":[{"modifiedAt":1794425532829,"name":"CNA: Grayback","retrievedAt":1794427745596,"url":"https://www.cve.org/CVERecord?id=CVE-2026-126784"}],"ssvc":null,"status":"published","title":"Uncontrolled resource consumption via post_notice","updatedAt":1794427745596}