CVE-2026-5794: Ercom Cryptobox

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to prevent another to login by triggering an account lockout via sending a specially crafted request.

Affected products

• Ercom Cryptobox: before 4.37.237 (fixed in 4.37.237); from 4.38.0

Published 2026-04-28. Last modified 2026-06-17.