CVE-2026-44796

Description

Nautobot: Object bulk rename UI actions vulnerable to denial of service by crafted regular expression (REDoS)

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://github.com/nautobot/nautobot/security/advisories/GHSA-qrpw-gjvh-x5gm
• https://github.com/nautobot/nautobot/commit/5a30d0916953afbeedd24a784709e762cc3879cd
• https://github.com/nautobot/nautobot/commit/c2b766966d814a7141f62c7bc90c85fefb7892ee
• https://github.com/nautobot/nautobot
• https://github.com/nautobot/nautobot/releases/tag/v2.4.33
• https://github.com/nautobot/nautobot/releases/tag/v3.1.2
• https://github.com/advisories/GHSA-qrpw-gjvh-x5gm