CVE-2026-38999
A Null Pointer Dereference in the mk_sched_event_close function (mk_server/mk_scheduler.c) of Monkey through commit 4fb0c16 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.
- Published Sep 16, 2026
- CVSS 7.5 high
- 1.4% chance of exploitation in the next 30 days (EPSS)