Is CVE-2026-115716 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-115716?

CVE-2026-115716 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-115716

Description

Allocation of Resources Without Limits or Throttling (CWE-770) in APM Server can lead to denial of service via Oversized Serialized Data Payloads (CAPEC-231). An attacker who can send OpenTelemetry (OTLP) data to APM Server over HTTP can cause APM Server to exhaust its memory and terminate. This stops the intake of APM and OpenTelemetry data until APM Server restarts.