CVE-2026-2957

MEDIUM

qinming99 dst-admin <=1.5.0 - DoS

Title source: llm

Description

A weakness has been identified in qinming99 dst-admin up to 1.5.0. This impacts the function deleteBackup of the file src/main/java/com/tugos/dst/admin/controller/BackupController.java of the component File Handler. This manipulation causes denial of service. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Scores

CVSS v3 5.4
EPSS 0.0005
EPSS Percentile 14.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Classification

CWE
CWE-404
Status published

Affected Products (1)

dst-admin_project/dst-admin < 1.5.0

Timeline

Published Feb 22, 2026
Tracked Since Feb 23, 2026