CVE-2026-28342

CVE-2026-28342 affects OliveTin versions prior to 3000.10.2, where an unauthenticated attacker can trigger excessive memory allocation via the PasswordHash API endpoint. By sending concurrent requests, an attacker can exhaust container memory, leading to a denial of service (DoS). This vulnerability has a CVSS score of 7.5 (High), indicating a network-based attack with low complexity and high availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in the KEV catalog, though it has received minimal community discussion.