PatchSiren

Velneo CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Velneo CVE published 2026-10-21

CVE-2026-114405

The CVE-2026-114405 vulnerability affects Velneo vServer, specifically versions from 36.0 before 36.6 and from 37.0 before 37.2. It allows for a Denial of Service attack via a malformed VATP packet due to improper validation of array index. Velneo vServer administrators and security teams should assess exposure and prioritize verification of their inventory. The CVE record was published on 2026-10-21T12:2 [truncated]