PatchSiren

PatchSiren cyber security CVE debrief

CVE-2019-25434 Nsasoft CVE debrief

CVE-2019-25434 is a denial of service vulnerability in SpotAuditor 5.3.1.0. Unauthenticated attackers can crash the application by submitting excessive data in the registration name field. A large string of characters (5000 bytes or more) in the name field during registration triggers an unhandled exception that crashes the application. The vulnerability has a CVSS score of 6.7 and a severity of MEDIUM. The CVE was published on 2026-02-20T23:16:00.037Z and last modified on 2026-06-29T18:28:40.610Z.

Vendor
Nsasoft
Product
Nsauditor SpotAuditor
CVSS
MEDIUM 6.7
CISA KEV
Not listed in stored evidence
Original CVE published
2026-02-20
Original CVE updated
2026-06-29
Advisory published
2026-02-20
Advisory updated
2026-06-29

Who should care

Security teams and administrators responsible for SpotAuditor installations should be aware of this vulnerability. The vulnerability allows unauthenticated attackers to crash the application, which could lead to denial of service and potential disruption of business operations. Affected organizations should prioritize patching or mitigating this vulnerability.

Technical summary

The vulnerability exists in SpotAuditor 5.3.1.0 and is caused by the application's failure to handle excessive input in the registration name field. An unauthenticated attacker can submit a large string of characters (5000 bytes or more) in the name field during registration, triggering an unhandled exception that crashes the application. The CVSS vector for this vulnerability is CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X.

Defensive priority

Medium priority should be given to patching or mitigating this vulnerability, as it allows unauthenticated attackers to crash the application. Security teams should work with administrators to identify affected systems and prioritize remediation.

Recommended defensive actions

  • Patch SpotAuditor installations to a version that fixes this vulnerability.
  • Implement input validation and sanitization for user-submitted data.
  • Monitor SpotAuditor logs for suspicious activity.
  • Consider implementing a web application firewall (WAF) to detect and prevent similar attacks.
  • Conduct regular security audits and vulnerability assessments to identify and address potential issues.

Evidence notes

The CVE-2019-25434 vulnerability was reported by an unknown source and added to the CVE database on 2026-02-20T23:16:00.037Z. The NVD entry for this vulnerability provides additional details, including the CVSS vector and CWE classification. The vulnerability is classified as CWE-121.

Sources and references

Verified primary and authoritative sources

  • CVE-2019-25434 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2019-25434

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2019-25434 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2019-25434

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.