CVE-2026-104628— Satel Netco Design Inefficient Regular Expression Complexity
Quick assessment
Affected
Satel Satel Netco Design
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Satel Netco Design 在 v2.1.7 之前的版本中存在一个正则表达式复杂度漏洞。具有 Viewer 权限的认证用户可以提交精心构造的搜索输入，导致 excessive processing（过度处理），从而可能降低应用程序的可用性。
Possible ATT&CK Techniques 1 AI
T1496 · Resource Hijacking
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-104628
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Satel Netco Design Inefficient Regular Expression Complexity
Source: CVE Program / CVE List V5
Vulnerability Description
Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity vulnerability. An authenticated user with Viewer privileges could submit crafted search input that causes excessive processing, potentially degrading the availability of the application.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1333
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Satel | Satel Netco Design | 0 ~ v2.1.7 | - |
|
II. Public POCs for CVE-2026-104628
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-104628
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-104628 (1)
Same Patch Batch · Satel · 2026-10-08 · 4 CVEs total
| CVE-2026-101024 | 8.8 HIGH | Satel Netco Design Relative path traversal |
| CVE-2026-105269 | 6.8 MEDIUM | Satel Netco Design Cross-site Scripting |
| CVE-2026-105275 | 4.3 MEDIUM | Satel Netco Design Relative Path Traversal |
IV. Related Vulnerabilities
Same weakness: CWE-1333
-
CVE-2026-107290
Pydantic AI: Event loop blocked by quadratic title extractio -
CVE-2026-107572
Inefficient Regular Expression Complexity in hMailServer -
CVE-2026-106454
Twisted: IMAP wildcardToRegexp() ReDoS -
CVE-2026-102408
Inefficient Regular Expression Complexity in Elasticsearch L -
CVE-2026-106104
Quasar Framework: Super-linear regex backtracking on User-Ag
V. Comments for CVE-2026-104628
No comments yet