CVE-2026-18503
Super-linear CPU usage for unbounded input to csv.Sniffer.sniff()
CVSS score
2.4
EPSS probability
%0.1
Risk score
0.0
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.4
CVE-2025-4517
Arbitrary writes via tarfile realpath overflow
PS
Patch verifiedEPSS %1
7.5
CVE-2025-4330
Extraction filter bypass for linking outside extraction directory
PS
Patch verified Public Exploits:4EPSS %1
9.1
CVE-2026-6100
Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure
PS
Patch verifiedEPSS %1
8.2
CVE-2026-11972
tarfile opened in streaming mode mishandles EOF
PS
Patch verifiedEPSS %1
7.8
CVE-2026-11940
tarfile extraction filter bypass allows escaping the destination directory
PS
Patch verifiedEPSS %1
8.7
CVE-2026-15308
Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations
PS
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-18503"