CVE-2026-107168

A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an attacker can cause the text parsing function to enter an infinite loop. This issue leads to sustained high CPU utilization, resulting in a Denial of Service (DoS) for the affected application.

• CWE-835

• https://access.redhat.com/security/cve/CVE-2026-107168
• https://bugzilla.redhat.com/show_bug.cgi?id=2547409

Published

Oct 7, 2026

Last Modified

Oct 7, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-10715Camaleon CMS 2.9.2 contains an improper authorization vulner…5.1
• CVE-2026-107151Missing authentication has been found in remote-execution ta…5.9
• CVE-2026-107159MiniUPnPd through 2.3.11 built with --strict contains a divi…6.5
• CVE-2026-10716Directus contains an authenticated SQL injection vulnerabili…7.5
• CVE-2026-107162Express Gateway through 1.16.11 contains an authentication b…6.8
• CVE-2026-107167A flaw was found in m17n-lib. A user providing specially cra…6.2
• CVE-2026-107169A flaw was found in m17n-lib. An attacker could provide spec…6.2
• CVE-2026-10717Out of bounds write and reads in openSeaChest’s --showSCSIDe…1.8
• CVE-2026-107170A flaw was found in m17n-lib. A partial failure during libra…2.9
• CVE-2026-107174A flaw was found in source-to-image. When unpacking archive …6.4
• CVE-2026-107175MISP contains a defect in its event save workflow that preve…5.3
• CVE-2026-107177Express Gateway through 1.16.11 contains a hardcoded cryptog…5.9