5.1
Medium
CVE-2026-11796 Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet…
Description
Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet and ResourceBundleReloadServlet, which could result in denial-of-service conditions affecting application availability. These servlets are designed to perform specific functions within production environment depending on how the Asset Suite application is configured.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Asset Suite 9.6 | 9.6.0 → 9.9.0 | No fix stated |
Other CVEs of Asset Suite
The 5 CVEs of Asset Suite →
CVE-2026-7395
Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file…
8.5
High
CVE-2025-10217
A vulnerability exists in Asset Suite for an authenticated user to manipulate the content of performance related log…
6.0
Medium
CVE-2025-2500
A vulnerability exists in the SOAP Web services of the Asset
Suite versions listed below
9.1
Critical
CVE-2025-1484
A vulnerability exists in the media upload component of the Asset
Suite versions listed below
6.3
Medium