CVE-2023-53873: Syncbreeze

High severity, CVSS 8.7. EPSS: 0.5% chance of exploitation in the next 30 days.

SyncBreeze 15.2.24 contains a denial of service vulnerability in the login authentication mechanism that allows attackers to crash the service. Attackers can send an oversized password parameter with repeated 'password=' values to overwhelm the login endpoint and potentially disrupt service availability.

Affected products

• Syncbreeze Syncbreeze: version 15.2.24 only

Published 2025-12-15. Last modified 2026-06-17.