CVE-2026-52794— Sentry: Inefficient Regular Expression Complexity in sentry
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-52794
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Sentry: Inefficient Regular Expression Complexity in sentry
Source: NVD (National Vulnerability Database)
Vulnerability Description
Sentry is an error tracking and performance monitoring tool. From 24.4.0 until 26.5.2, a Regular Expression Denial of Service (ReDoS) vulnerability exists in Sentry's event ingestion pipeline, where a regex applied to attacker-controlled fields on incoming events can be made to consume disproportionate CPU time. This vulnerability is fixed in 26.5.2.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
CWE-1333
Source: NVD (National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-52794
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-52794
请登录查看更多情报信息。
Other References for CVE-2026-52794 (2)
IV. Related Vulnerabilities
Same product: sentry
Same vendor: getsentry
- CVE-2026-42354
Sentry: Improper authentication on SAML SSO process allows u - CVE-2026-26004
Sentry allows unauthorized access to event data across organ - CVE-2026-27197
Sentry: Improper Authentication on SAML SSO process allows u - CVE-2025-65944
Sentry-Javascript deals with leaked sensitive headers when ` - CVE-2025-53099
Sentry Missing Invalidation of Authorization Codes During OA
Same weakness: CWE-1333
- CVE-2025-71379
vllm - Regular Expression Denial of Service in Multiple Comp - CVE-2026-45617
LiquidJS: ReDoS via Quadratic Backtracking in `strip_html` F - CVE-2026-47138
Parse Server: Pre-authentication denial of service via clien - CVE-2026-42567
Svelte: ReDoS in `<svelte:element>` Tag Validation - CVE-2026-41848
Spring Framework Denial of Service via AntPathMatcher
V. Comments for CVE-2026-52794
No comments yet