Vulnerability Report

CVE-2026-24816

Title: Infinite Loop in datavane tis

DoS

Proof Of Concept

No public PoC currently indexed for CVE-2026-24816.

CWE Category CWE-835

Published Date Jan 27, 2026

Modified Date Apr 15, 2026

Exploit Status Not Found

Score 10.0 CVSS v4.0

Exploit Probability (EPSS)

0.27%

Vulnerability Summary

CVE-2026-24816: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in datavane tis (tis-console/src/main/java/com/qlangtech/tis/runtime/module/action modules). This vulnerability is associated with program files ChangeDomainAction.Java. This issue affects tis: before v4.3.0.

Impacted Vendors

Analysis in Progress...

Reference Links

https://github.com/datavane/tis/pull/444

CVSS v4.0

Source Entity [email protected]

Severity CRITICAL

10.0

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

N/A

RAW VECTOR

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:C/RE:M/U:Red

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2026-24816 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

April 15, 2026 MODIFIED

Vulnerability data updated via NVD.

January 27, 2026 MODIFIED

Vulnerability data updated via NVD.

January 27, 2026 MODIFIED

Vulnerability data updated via NVD.

Attack Vector Matrix

Access Vector NETWORK

Complexity LOW

Privileges N/A

Interaction NONE

CVSS Vector String


                                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:C/RE:M/U:Red

Affected Stack

No specific products linked.