pbuchbinder has 4 CVEs on record. 4 were published in the last 90 days. The busiest recent month was October 2026 with 4. The median CVSS is 4.5 (medium).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 4.5
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Worst active — by depth score
CVE-2026-114458Medium· 5.9Mod_qos: undersized connection-monitor scratch array permits heap buffer overflow32CVE-2026-114460Medium· 5.3Mod_qos: query truncation during json body merging permits security-rule bypass29CVE-2026-114459Low· 3.7Mod_qos: out-of-bounds reads in response-body substring matching20CVE-2026-114457Low· 3.7Mod_qos: missing nul termination in json value escaping permits out-of-bounds reads20
pbuchbinder vulnerabilities
CVEs affecting pbuchbinder, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-114458Medium· 5.9Mod_qos: undersized connection-monitor scratch array permits heap buffer overflow
A flaw was found in mod_qos. An unauthenticated remote attacker can cause a Denial of Service (DoS) by maintaining numerous concurrent low-rate connections to a target server. When connection rate monitoring is active, the module fails t…
CVE-2026-114457Low· 3.7Mod_qos: missing nul termination in json value escaping permits out-of-bounds reads
A flaw was found in mod_qos. An unauthenticated remote attacker could cause a Denial of Service (DoS) by sending a specially crafted JSON request when JSON body filtering is enabled. Due to improper string termination during the processi…
CVE-2026-114460Medium· 5.3Mod_qos: query truncation during json body merging permits security-rule bypass
A flaw was found in mod_qos. An off-by-one pointer calculation error occurs when merging request body parameters with an existing URL query, which truncates the query string during security evaluation while leaving the actual request unc…
CVE-2026-114459Low· 3.7Mod_qos: out-of-bounds reads in response-body substring matching
A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenticated remote attacker can exploit this vulnerability by t…