Medium severity4.3NVD Advisory· Published Sep 9, 2026· Updated Sep 9, 2026

CVE-2026-86202

Description

PocketMine-MP versions before 5.39.2 contain a network amplification vulnerability in ActorEventPacket handling that allows clients to trigger consuming animations for all visible players. Attackers can send crafted ActorEventPacket messages to spam animation events to other clients and waste server CPU and memory resources.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pmmp/Pocketmine Mpreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <5.39.2

Patches

Vulnerability mechanics

References

github.com/pmmp/PocketMine-MP/commit/aeea1150a772a005b92bd418366f1b7cf1a91ab5nvd
github.com/pmmp/PocketMine-MP/security/advisories/GHSA-7hmv-4j2j-pp6fnvd
www.vulncheck.com/advisories/pocketmine-mp-before-5.39.2-network-amplification-via-actoreventpacketnvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000