All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-64951
LOWpublished 2026-08-12 10:17 UTC · 17 hours ago · modified 2026-08-12 13:17 UTC
3.5
CVSS / 10
// description
A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process. The problem is a Divide by Zero bug in the ShouldPadFile() function.
// weaknesses (CWE)
- CWE-369