CVE-2020-36946: Flexense Syncbreeze

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

SyncBreeze 10.0.28 contains a denial of service vulnerability in the login endpoint that allows remote attackers to crash the service. Attackers can send an oversized payload in the login request to overwhelm the application and potentially disrupt service availability.

Affected products

• Flexense Syncbreeze: version 10.0.28 only

Published 2026-01-27. Last modified 2026-06-17.