High severity · published Sep 10, 2025
CVE-2025-8696
DoS attack against the Stork UI from an unauthenticated user
7.5
CVSS
0.5%
EPSS
No
On KEV
Description
If an unauthenticated user sends a large amount of data to the Stork UI, it may cause memory and disk use problems for the system running the Stork server.
This issue affects Stork versions 1.0.0 through 2.3.0.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ST
Stork · ISC
1.0.0 through 2.3.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-8696
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-8696
kb.isc.org
https://kb.isc.org/docs/cve-2025-8696
www.openwall.com
http://www.openwall.com/lists/oss-security/2025/09/10/5
More from Stork
8.1
CVE-2024-28872
Incorrect TLS certificate validation can lead to escalated privileges