CVE-2026-33262

CVE-2026-33262 is a null pointer dereference vulnerability that occurs when an attacker sends specially crafted replies that bypass missing consistency checks in the affected application, resulting in a denial of service condition. The specific products impacted by this vulnerability are not detailed in the provided data. The vulnerability has a CVSS score of 5.9 (Medium severity) and can be exploited remotely without authentication or user interaction, though it requires high attack complexity. The attack results in availability impact through denial of service, while confidentiality and integrity remain unaffected. Notably, cookies are disabled by default in the affected application, which may limit certain attack vectors. There is currently no evidence of active exploitation in the wild, with the vulnerability not appearing on the Known Exploited Vulnerabilities (KEV) catalog or industry hot lists. The EPSS score of 0.00005 indicates minimal probability of exploitation compared to other disclosed vulnerabilities, suggesting low community attention and limited availability of public exploit code.