CVE-2026-16211

LOW 2.6

allegro Hostname Allocation assets.py AssetLastHostname.increment_hostname race condition

CVSS Score

2.6

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was determined in allegro up to bcf65b994ef29fb3fc2e10b660e6288723d5209e. This impacts the function AssetLastHostname.increment_hostname of the file src/ralph/assets/models/assets.py of the component Hostname Allocation Handler. Executing a manipulation of the argument counter can lead to race condition. Attacks of this nature are highly complex. The exploitability is said to be difficult. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-362
Vendor	n/a
Product	allegro
Published	Jul 19, 2026

Stay Ahead of the Next One

Get instant alerts for n/a allegro

Be the first to know when new low vulnerabilities affecting n/a allegro are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

n/a / allegro

bcf65b994ef29fb3fc2e10b660e6288723d5209e

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/380027 vuldb.com: https://vuldb.com/vuln/380027/cti vuldb.com: https://vuldb.com/cve/CVE-2026-16211 vuldb.com: https://vuldb.com/submit/857935 github.com: https://github.com/allegro/ralph/issues/3950

Credits

🔍 GalaxynC (VulDB User) VulDB CNA Team