CVE-2026-40891 — Denial of Service

CVE-2026-40891 — Denial of Service

CVE-2026-40891 — OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry over gRPC using the OpenTelemetry Protocol (OTLP), the exporter may parse a server-provided grpc-status-details-bin trailer during retry handling. Prior to the fix, a malform

What This Means For You

  • If your environment is affected by CWE-789, review your exposure and prioritize patching based on your environment. Monitor vendor advisories for CVE-2026-40891 updates and patches.
🛡️ Am I exposed to this? Get detection rules for CVE-2026-40891 — Splunk, Sentinel, Elastic, QRadar & more

Related ATT&CK Techniques

🛡️ Detection Rules

2 rules · 6 SIEM formats

2 detection rules auto-generated for this incident, mapped to MITRE ATT&CK. Sigma YAML is free — export to any SIEM format via the Intel Bot.

medium T1499 Impact

CVE-2026-40891 - OpenTelemetry dotnet gRPC OTLP Excessive Memory Allocation

Sigma YAML — free preview
✓ Sigma · Splunk SPL Sentinel KQL Elastic QRadar AQL Wazuh Get rules for your SIEM →

Indicators of Compromise

IDTypeIndicator
CVE-2026-40891 vulnerability CVE-2026-40891
CWE-789 weakness CWE-789
Source & Attribution
Source PlatformNVD
ChannelNational Vulnerability Database
PublishedApril 23, 2026 at 21:16 UTC

This content was curated and summarized by Shimi's Cyber World for informational purposes. It is not copied or republished in full. All intellectual property rights remain with the original author and source.

Believe this infringes your rights? Submit a takedown request.

Related Posts

Flowise SSRF Bypass: DNS Rebinding Opens LLM Flows to Attackers

CVE-2026-41272 — Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the core security wrappers...

vulnerabilityCVEhigh-severityserver-side-request-forgerycwe-918
/SCW Vulnerability Desk /HIGH /7.1 /⚑ 4 IOCs /⚙ 3 Sigma

Flowise SSRF Vulnerability Exposes Internal Systems

CVE-2026-41271 — Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side Request Forgery...

vulnerabilityCVEhigh-severityserver-side-request-forgerycwe-918
/SCW Vulnerability Desk /HIGH /7.1 /⚑ 1 IOC /⚙ 3 Sigma

Flowise SSRF Bypass: Internal Network at Risk

CVE-2026-41270 — Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side Request Forgery...

vulnerabilityCVEhigh-severityserver-side-request-forgerycwe-284cwe-918
/SCW Vulnerability Desk /HIGH /7.1 /⚑ 3 IOCs /⚙ 3 Sigma