CVE-2026-73216: Premature Quota Decrement Mobile Session

Quota or bandwidth usage counters are decremented before checking if a session is mobile or suspended. This prematurely releases quota counters while session resources remain active, allowing quota enforcement bypass.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-73216-premature-quota-decrement-mobile-session --engine opengrep

Description

Quota or bandwidth usage counters are decremented before checking if a session is mobile or suspended. This prematurely releases quota counters while session resources remain active, allowing quota enforcement bypass.