CWE-400 未加控制的资源消耗(资源穷尽) 类弱点 1802 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-400 指资源消耗不受控漏洞，属于资源管理缺陷。攻击者通常通过发送大量请求或构造复杂查询，耗尽服务器 CPU、内存或带宽，导致服务拒绝。开发者应避免此类问题，需实施严格的速率限制、请求大小校验及资源配额管理，并设置合理的超时机制与异常处理逻辑，确保有限资源在预期范围内被安全分配与维护。
class Worker implements Executor { ... public void execute(Runnable r) { try { ... } catch (InterruptedException ie) { // postpone response Thread.currentThread().interrupt(); } } public Worker(Channel ch, int nworkers) { ... } protected void activate() { Runnable loop = new Runnable() { public void run() { try { for (;;) { Runnable r = ...; r.run(); } } catch (InterruptedException ie) { ... } } }; new Thread(loop).start(); } }sock=socket(AF_INET, SOCK_STREAM, 0); while (1) { newsock=accept(sock, ...); printf("A connection has been accepted\n"); pid = fork(); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-44242 | Micronaut Framework 资源管理错误漏洞 — micronaut-core | 3.7 | Low | 2026-05-12 |
| CVE-2026-44296 | deskflow 资源管理错误漏洞 — deskflow | 7.5 | High | 2026-05-12 |
| CVE-2026-44240 | Basic FTP 资源管理错误漏洞 — basic-ftp | 7.5 | High | 2026-05-12 |
| CVE-2026-34678 | Adobe CAI Content Credentials 资源管理错误漏洞 — Content Credentials JS SDK | 6.2 | Medium | 2026-05-12 |
| CVE-2026-34673 | Adobe CAI Content Credentials 资源管理错误漏洞 — Content Credentials JS SDK | 6.2 | Medium | 2026-05-12 |
| CVE-2026-34665 | Adobe CAI Content Credentials 资源管理错误漏洞 — Content Credentials JS SDK | 7.5 | High | 2026-05-12 |
| CVE-2026-34677 | Adobe CAI Content Credentials 资源管理错误漏洞 — Content Credentials JS SDK | 6.2 | Medium | 2026-05-12 |
| CVE-2026-34650 | Adobe Commerce 资源管理错误漏洞 — Adobe Commerce | 7.5 | High | 2026-05-12 |
| CVE-2026-34648 | Adobe Commerce 资源管理错误漏洞 — Adobe Commerce | 7.5 | High | 2026-05-12 |
| CVE-2026-34649 | Adobe Commerce 资源管理错误漏洞 — Adobe Commerce | 7.5 | High | 2026-05-12 |
| CVE-2026-34651 | Adobe Commerce 资源管理错误漏洞 — Adobe Commerce | 7.5 | High | 2026-05-12 |
| CVE-2026-44167 | phpseclib 资源管理错误漏洞 — phpseclib | 7.5 | High | 2026-05-12 |
| CVE-2026-42006 | Open-Xchange OX Dovecot Pro 资源管理错误漏洞 — OX Dovecot Pro | 4.3 | Medium | 2026-05-12 |
| CVE-2026-40016 | Open-Xchange OX Dovecot Pro 资源管理错误漏洞 — OX Dovecot Pro | 5.3 | Medium | 2026-05-12 |
| CVE-2026-8319 | agents 资源管理错误漏洞 — agents | 5.3 | Medium | 2026-05-11 |
| CVE-2026-7790 | Cowlib 资源管理错误漏洞 — cowlib | - | - | 2026-05-11 |
| CVE-2025-10470 | WSO2 Identity Server 资源管理错误漏洞 — WSO2 Identity Server | 8.6 | High | 2026-05-11 |
| CVE-2026-8187 | Open5GS 资源管理错误漏洞 — Open5GS | 5.3 | Medium | 2026-05-09 |
| CVE-2026-42343 | FastGPT 资源管理错误漏洞 — FastGPT | 7.5AI | High AI | 2026-05-08 |
| CVE-2026-42212 | Postprocessor IDE for SolidCAM 资源管理错误漏洞 — SolidCAM-GPPL-IDE | 9.8AI | Critical AI | 2026-05-08 |
| CVE-2026-32686 | Decimal 资源管理错误漏洞 — decimal | 6.9 | Medium | 2026-05-07 |
| CVE-2026-20188 | Cisco Network Services Orchestrator和Cisco Crosswork Network Controller 资源管理错误漏洞 — Cisco Crosswork Network Change Automation | - | - | 2026-05-06 |
| CVE-2026-32936 | CoreDNS 资源管理错误漏洞 — coredns | 7.5 | - | 2026-05-05 |
| CVE-2026-42154 | Prometheus 资源管理错误漏洞 — prometheus | 7.5 | High | 2026-05-04 |
| CVE-2026-42402 | Apache Neethi 资源管理错误漏洞 — Apache Neethi | 7.5 | High | 2026-05-01 |
| CVE-2026-42403 | Apache Neethi 资源管理错误漏洞 — Apache Neethi | 7.5 | High | 2026-05-01 |
| CVE-2026-22745 | VMware Spring Framework 资源管理错误漏洞 — Spring Framework | 5.3 | Medium | 2026-04-29 |
| CVE-2026-22740 | VMware Spring Framework 资源管理错误漏洞 — Spring Framework | 6.5 | Medium | 2026-04-29 |
| CVE-2026-40980 | VMware Spring AI 资源管理错误漏洞 — Spring AI | 6.5 | Medium | 2026-04-28 |
| CVE-2026-41680 | marked 资源管理错误漏洞 — marked | 7.5AI | High AI | 2026-04-24 |
CWE-400（未加控制的资源消耗(资源穷尽)） 是常见的弱点类别，本平台收录该类弱点关联的 1802 条 CVE 漏洞。