Login Request a demo
High severity · published Jan 27, 2026
CVE-2020-36946
SyncBreeze 10.0.28 - 'login' Denial of Service
7.5
CVSS
0.7%
EPSS
No
On KEV
Description
SyncBreeze 10.0.28 contains a denial of service vulnerability in the login endpoint that allows remote attackers to crash the service. Attackers can send an oversized payload in the login request to overwhelm the application and potentially disrupt service availability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SY
SyncBreeze · Flexense Ltd.
10.0.28 · source: vendor, NVD
Affected product
SY
SyncBreeze
Flexense Ltd.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-36946
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-36946
Product
http://www.syncbreeze.com
Exploit
https://www.exploit-db.com/exploits/49291
Third Party Advisory
https://www.vulncheck.com/advisories/syncbreeze-login-denial-of-service