CVE-2026-27844

lowCVSS 2.7covered by 1 sourcefirst seen 2026-07-07

Uncaught Exception (CWE-248) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticated and authorized operator to trigger a Controller restart by sending specific requests, resulting in a temporary denial of service. Version of Command Centre affected: - 9.50 prior to vCR9.50.260616a (distributed in 9.50.1587(MR1)) - 9.40 prior to vCR9.40.260616a (distributed in 9.40.3130(MR3)) - 9.30 prior to vCR9.30.260616a (distributed in 9.30.3983(MR5)) - 9.20 prior to vCR9.20.260616a (distributed in 9.20.4349(MR7)) - all versions of 9.10 and prior.

⚡ Watch CVE-2026-27844

Get an email if CVE-2026-27844 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.23% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 13% of all EPSS-scored CVEs.

Advisory coverage (1)

lowCVE-2026-27844: Uncaught Exception (CWE-248) in the Controller 6000 and Controller 7000 diagnostic web interfa…nvd · 2026-07-07

External references

NVD record for CVE-2026-27844

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-27844 status](https://www.csirts.com/badge/CVE-2026-27844)](https://www.csirts.com/cve/CVE-2026-27844)