CVE-2026-16218

A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function reset_storage of the file app/workers/tasks/storage.py of the component Storage Reset Failure Handler. The manipulation results in improper check or handling of exceptional conditions. A high complexity level is associated with this attack. The exploitation is known to be difficult. The project was informed of the problem early through an issue report but has not responded yet.

CVSS v3 2.6 LOW
CVSS v2.0 1.4 LOW

2.6^/10

CVSS v3 : LOW

Vector :

Exploitability : 1.2 / Impact : 1.4

Attack Vector ADJACENT_NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

1.4^/10

CVSS v2.0 : LOW

Vector : AV:A/AC:H/Au:S/C:N/I:P/A:N

Exploitability : 2.5 / Impact : 2.9

Access Vector ADJACENT_NETWORK

Access Complexity HIGH

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://github.com/hunvreus/devpush/
https://github.com/hunvreus/devpush/issues/69
https://vuldb.com/cve/CVE-2026-16218
https://vuldb.com/submit/857951
https://vuldb.com/vuln/380041
https://vuldb.com/vuln/380041/cti
https://github.com/hunvreus/devpush/issues/69

Configurations

No configuration.

History

20 Jul 2026, 15:16

Type	Values Removed	Values Added
References	~~() https://github.com/hunvreus/devpush/issues/69 -~~	() https://github.com/hunvreus/devpush/issues/69 -

19 Jul 2026, 06:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-07-19 06:17

Updated : 2026-07-20 15:16

NVD link : CVE-2026-16218

Mitre link : CVE-2026-16218

CVE.ORG link : CVE-2026-16218

JSON object : View

Products Affected

No product.

CWE

CWE-703

Improper Check or Handling of Exceptional Conditions

{"id": "CVE-2026-16218", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-16218", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-20T13:56:56.035215Z"}}], "cvssMetricV2": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"version": "2.0", "baseScore": 1.4, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:H/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 2.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.6, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 1.2}], "cvssMetricV40": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 2.1, "Automatable": "NOT_DEFINED", "attackVector": "ADJACENT", "baseSeverity": "LOW", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "cna@vuldb.com", "affectedData": [{"cpes": ["cpe:2.3:a:hunvreus:devpush:*:*:*:*:*:*:*:*"], "vendor": "hunvreus", "modules": ["Storage Reset Failure Handler"], "product": "devpush", "versions": [{"status": "affected", "version": "0.4.0"}, {"status": "affected", "version": "0.4.1"}, {"status": "affected", "version": "0.4.2"}, {"status": "affected", "version": "0.4.3"}, {"status": "affected", "version": "0.4.4"}, {"status": "affected", "version": "0.4.5"}, {"status": "affected", "version": "0.4.6"}]}]}], "published": "2026-07-19T06:17:10.067", "references": [{"url": "https://github.com/hunvreus/devpush/", "source": "cna@vuldb.com"}, {"url": "https://github.com/hunvreus/devpush/issues/69", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/cve/CVE-2026-16218", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/submit/857951", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/vuln/380041", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/vuln/380041/cti", "source": "cna@vuldb.com"}, {"url": "https://github.com/hunvreus/devpush/issues/69", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "cna@vuldb.com", "description": [{"lang": "en", "value": "CWE-703"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function reset_storage of the file app/workers/tasks/storage.py of the component Storage Reset Failure Handler. The manipulation results in improper check or handling of exceptional conditions. A high complexity level is associated with this attack. The exploitation is known to be difficult. The project was informed of the problem early through an issue report but has not responded yet."}], "lastModified": "2026-07-20T15:16:36.003", "sourceIdentifier": "cna@vuldb.com"}