CVE-2019-25596 - CVE House
Back to Database
Status published Medium CVE-2019-25596

SpotAuditor 5.2.6 Name Field Denial of Service

Vulnerability Description

SpotAuditor 5.2.6 contains a denial of service vulnerability in the registration dialog that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a buffer of 300 repeated characters into the Name input during registration to trigger an application crash.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-25596

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Victor Mondragón

References

More from Nsauditor

View All →
CVE-2021-47895
Nsauditor 3.2.2.0 - 'Event Description' Denial of Service
Medium 6.7
CVE-2021-47815
Nsauditor 3.2.3 - Denial of Service (PoC)
Medium 6.7
CVE-2021-47814
NBMonitor 1.6.8 - Denial of Service (PoC)
Medium 6.7
CVE-2021-47813
Backup Key Recovery 2.2.7 - Denial of Service (PoC)
Medium 6.7
CVE-2020-37131
Product Key Explorer 4.2.2.0 - 'Key' Denial of Service
Medium 6.7

Affected Vendor

Affected Software

SpotAuditor
Vulnerable Versions:
5.2.6

Timeline

Official Publish: March 22nd, 2026
Last Modified: March 23rd, 2026
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-1287

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.