CVE-2026-44601 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	3.7 LOW	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 11%

Affected Products (NVD)

Vendor	Product	Version
torproject	tor	𝑥 < 0.4.9.7

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

tor

bookworm	vulnerable
bookworm (security)	vulnerable
bullseye	vulnerable
bullseye (security)	vulnerable
forky	vulnerable
sid	0.4.9.8-1 fixed
trixie	vulnerable
trixie (security)	vulnerable

Common Weakness Enumeration

CWE-837 - Improper Enforcement of a Single, Unique Action
The software requires that an actor should only be able to perform an action once, or to have only one unique action, but the software does not enforce or improperly enforces this restriction.

Vulnerability Media Exposure

[GERMAN] Tor: Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Tor ausnutzen, um einen Denial of Service Angriff durchzuführen oder Daten zu manipulieren.
Published: 2026-05-06T22:00:00+00:00

References

https://forum.torproject.org/c/news/tor-release-announcement/28

https://gitlab.torproject.org/tpo/core/tor/-/commit/d4e3f6a440b58c2be661decf20c09548704907dc

https://gitlab.torproject.org/tpo/core/tor/-/work_items/41237

https://www.openwall.com/lists/oss-security/2026/05/06/8