Unrated severityNVD Advisory· Published Sep 16, 2026

CVE-2026-38999

Description

A Null Pointer Dereference in the mk_sched_event_close function (mk_server/mk_scheduler.c) of Monkey through commit 4fb0c16 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mw Wp Form Project/Monkeyreferences
Monkey CMS/Monkey CMSllm-fuzzy
Range: <4fb0c16

Patches

Vulnerability mechanics

References

github.com/archersec/security-advisories/blob/master/monkey/monkey-advisory-2026.mdnvd
github.com/monkey/monkey/issues/427nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000