CVE-2026-11796

Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet and ResourceBundleReloadServlet, which could result in denial-of-service conditions affecting application availability. These servlets are designed to perform specific functions within production environment depending on how the Asset Suite application is configured.

  • Published Sep 29, 2026
  • CVSS 5.1 medium
  • 0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-11796 at the National Vulnerability Database