CVE-2026-38999

{"id": "CVE-2026-38999", "cveTags": [], "metrics": {}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-09-16T19:17:14.660", "references": [{"url": "https://github.com/archersec/security-advisories/blob/master/monkey/monkey-advisory-2026.md", "source": "cve@mitre.org"}, {"url": "https://github.com/monkey/monkey/issues/427", "source": "cve@mitre.org"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "A Null Pointer Dereference in the mk_sched_event_close function (mk_server/mk_scheduler.c) of Monkey through commit 4fb0c16 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server."}], "lastModified": "2026-09-16T19:17:14.660", "sourceIdentifier": "cve@mitre.org"}