CWE-1088 · Race Conditions
Synchronous Access of Remote Resource without Timeout
9CVEs
SortMost likely exploited
9 CVEs with CWE-1088 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-89147Net-SNMP through 5.9.5.2 Denial of Service via Blocking Unauthenticated SMUX Readnet-snmp · Net-SNMP · CVSS 7.5 · 2026-09-11 | 7.5 | 0.5% | 2026-09-11 |
| CVE-2024-12777Denial of Service in aimhubio/aimaimhubio · aimhubio/aim · CVSS 5.9 · 2025-03-20 | 5.9 | 0.5% | 2025-03-20 |
| CVE-2024-8062Denial of Service in h2oai/h2o-3h2oai · h2oai/h2o-3 · CVSS 7.5 · 2025-03-20 | 7.5 | 0.5% | 2025-03-20 |
| CVE-2024-8061Denial of Service in aimhubio/aimaimhubio · aimhubio/aim · CVSS 7.5 · 2025-03-20 | 7.5 | 0.5% | 2025-03-20 |
| CVE-2020-14483A timeout during a TLS handshake can result in the connection failing to terminate. This can result in a Niagara thread hanging and requires a manual restart of Niagara (Versions…Tridium · Niagara · 2020-08-13 | – | 0.4% | 2020-08-13 |
| CVE-2026-81520MongoDB Connector for BI Unbounded Authentication Negotiation Leading to Connection ExhaustionMongoDB · BI Connector · CVSS 7.5 · 2026-08-28 | 7.5 | 0.4% | 2026-08-28 |
| CVE-2026-127141SOGo before 5.12.13 Denial of Service via Auxiliary IMAP Account Greeting WaitAlinto · sogo · CVSS 6.5 · 2026-11-12 | 6.5 | 0.3% | 2026-11-12 |
| CVE-2025-4656Vault Vulnerable to Recovery Key Cancellation Denial of ServiceHashiCorp · Vault · CVSS 3.1 · 2025-06-25 | 3.1 | 0.3% | 2025-06-25 |
| CVE-2026-103649Synchronous Access of Remote Resource without Timeout in hMailServerProgressive Robot Ltd · hMailServer · CVSS 7.5 · 2026-10-08 | 7.5 | 0.3% | 2026-10-08 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.