CWE-400 未加控制的资源消耗(资源穷尽) 类弱点 1802 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-400 指资源消耗不受控漏洞，属于资源管理缺陷。攻击者通常通过发送大量请求或构造复杂查询，耗尽服务器 CPU、内存或带宽，导致服务拒绝。开发者应避免此类问题，需实施严格的速率限制、请求大小校验及资源配额管理，并设置合理的超时机制与异常处理逻辑，确保有限资源在预期范围内被安全分配与维护。
class Worker implements Executor { ... public void execute(Runnable r) { try { ... } catch (InterruptedException ie) { // postpone response Thread.currentThread().interrupt(); } } public Worker(Channel ch, int nworkers) { ... } protected void activate() { Runnable loop = new Runnable() { public void run() { try { for (;;) { Runnable r = ...; r.run(); } } catch (InterruptedException ie) { ... } } }; new Thread(loop).start(); } }sock=socket(AF_INET, SOCK_STREAM, 0); while (1) { newsock=accept(sock, ...); printf("A connection has been accepted\n"); pid = fork(); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-49324 | Indian Motorcycle Scout Bobber + Tech 安全漏洞 — Scout Bobber + Tech | 4.6 | Medium | 2026-05-29 |
| CVE-2026-49094 | Elastic Kibana 安全漏洞 — Kibana | 6.5 | Medium | 2026-05-28 |
| CVE-2026-42399 | Elastic Kibana 安全漏洞 — Kibana | 6.5 | Medium | 2026-05-28 |
| CVE-2026-42400 | Elastic Kibana 安全漏洞 — Kibana | 6.5 | Medium | 2026-05-28 |
| CVE-2026-33464 | Elastic Kibana 安全漏洞 — Kibana | 6.5 | Medium | 2026-05-28 |
| CVE-2026-44796 | Nautobot 安全漏洞 — nautobot | 6.5 | Medium | 2026-05-28 |
| CVE-2026-48525 | pyjwt 安全漏洞 — pyjwt | 5.3 | Medium | 2026-05-28 |
| CVE-2026-48155 | pypdf 资源管理错误漏洞 — pypdf | - | - | 2026-05-28 |
| CVE-2026-44247 | Volcano 安全漏洞 — volcano | 6.8 | Medium | 2026-05-27 |
| CVE-2026-45047 | Bird-lg-go 资源管理错误漏洞 — bird-lg-go | 7.5 | High | 2026-05-27 |
| CVE-2026-7528 | IBM Langflow 资源管理错误漏洞 — Langflow OSS | 7.1 | High | 2026-05-27 |
| CVE-2026-6051 | IBM Db2 资源管理错误漏洞 — Db2 | 5.5 | Medium | 2026-05-27 |
| CVE-2026-7493 | WordPress plugin Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin 资源管理错误漏洞 — Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin | 5.3 | Medium | 2026-05-27 |
| CVE-2026-48593 | Oban Web 安全漏洞 — oban_web | - | - | 2026-05-26 |
| CVE-2026-8856 | IBM HTTP Server 资源管理错误漏洞 — HTTP Server | 7.7 | High | 2026-05-26 |
| CVE-2026-47073 | Hackney 安全漏洞 — hackney | - | - | 2026-05-25 |
| CVE-2026-47077 | Hackney 安全漏洞 — hackney | - | - | 2026-05-25 |
| CVE-2026-47071 | Hackney 安全漏洞 — hackney | - | - | 2026-05-25 |
| CVE-2026-5308 | Mattermost 安全漏洞 — Mattermost | 4.9 | Medium | 2026-05-22 |
| CVE-2026-5755 | Mattermost 安全漏洞 — Mattermost | 6.5 | Medium | 2026-05-22 |
| CVE-2026-9137 | MISP 资源管理错误漏洞 — misp | - | - | 2026-05-20 |
| CVE-2026-45498 | Microsoft Defender 安全漏洞 — Microsoft Defender Antimalware Platform | 4.0 | Medium | 2026-05-20 |
| CVE-2026-24215 | NVIDIA Triton Inference Server 资源管理错误漏洞 — Triton Inference Server | 5.7 | Medium | 2026-05-20 |
| CVE-2026-8769 | Vercel AI SDK 资源管理错误漏洞 — ai | 4.3 | Medium | 2026-05-17 |
| CVE-2026-42304 | Twisted 资源管理错误漏洞 — twisted | 7.5 | High | 2026-05-13 |
| CVE-2026-44248 | Netty 资源管理错误漏洞 — netty | 5.3 | Medium | 2026-05-13 |
| CVE-2026-42587 | Netty 资源管理错误漏洞 — netty | 7.5 | High | 2026-05-13 |
| CVE-2026-42583 | Netty 资源管理错误漏洞 — netty | 7.5 | High | 2026-05-13 |
| CVE-2026-44456 | Hono 资源管理错误漏洞 — hono | 6.5 | Medium | 2026-05-13 |
| CVE-2026-44241 | Micronaut Framework 资源管理错误漏洞 — micronaut-core | 7.5 | High | 2026-05-12 |
CWE-400（未加控制的资源消耗(资源穷尽)） 是常见的弱点类别，本平台收录该类弱点关联的 1802 条 CVE 漏洞。