PatchSiren

Open Mercato CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Open Mercato CVE published 2026-07-22

CVE-2026-16270

CVE-2026-16270 is a vulnerability in Open Mercato that allows an attacker with privileges to create a regex rule to add an unsafe regex to a field. When a proper string is provided, it can result in a DoS attack. The issue was fixed in version 0.6.4. Affected product deployments should be reviewed for exposure and patched or mitigated. This vulnerability has a CVSS score of 6.9 and a severity of MEDIUM. U [truncated]