agentprime: CWE-755

CVE-2026-120222: undici vulnerable to Denial of Service via unhandled exception in cache-interceptor response replay

Fri, 06 Nov 2026 10:00:50 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-100300: Apache ZooKeeper: Unauthenticated persistent denial of service via unvalidated quota-node data and paths crashing the transaction-apply thread

Wed, 04 Nov 2026 10:45:14 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-67080: HCL BigFix AEX is affected by multiple security vulnerabilities.

Wed, 28 Oct 2026 12:25:19 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-72758: Routinator may exit on malformed ranges

Mon, 26 Oct 2026 17:07:14 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-72757: Routinator HTTP server becomes unavailable with many unclosed connections

Mon, 26 Oct 2026 17:07:02 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-72756: Routinator exits on malformed rsync URIs

Mon, 26 Oct 2026 17:06:53 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-72755: Routinator stores TA certificate in cache without validation

Mon, 26 Oct 2026 17:06:43 GMT

CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-72754: Routinator exits when parsing an incorrect or very large CRL file

Mon, 26 Oct 2026 17:06:35 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-72753: Routinator incorrectly handles delta updates

Mon, 26 Oct 2026 17:06:25 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-72752: Routinator exits when requesting the output repeatedly

Mon, 26 Oct 2026 17:06:15 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-112332: Motor.NET < 0.19.0 Denial of Service via JsonNet Deserialization

Thu, 22 Oct 2026 19:42:17 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-112331: Motor.NET < 0.19.0 Kafka Denial of Service via Structured CloudEvent Mapping

Thu, 22 Oct 2026 19:41:15 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-112330: Motor.NET < 0.19.0 RabbitMQ Denial of Service via CloudEvents Headers

Thu, 22 Oct 2026 19:40:15 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-109619: RCE via stale global state

Wed, 21 Oct 2026 13:54:43 GMT

CVSS 9.2 (Critical). Critical: In CISA’s KEV catalogue since 26 Oct 2026: it is known to be exploited. CVSS score 9.2: 9.0 or more. CVSS score 9.2 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-109618: RCE via OOM corruption

Wed, 21 Oct 2026 13:48:34 GMT

CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin

Fri, 16 Oct 2026 19:26:42 GMT

github.com/coredns/coredns >=1.9.4, <1.14.5, fixed in 1.14.5. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-103936: libp2p: Single pre-auth STUN packet terminates `@libp2p/webrtc` WebRTC-direct Node.js listeners

Thu, 15 Oct 2026 17:28:32 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-85473: Out-of-Range Timestamp Claim Handling in auth0/java-jwt

Tue, 13 Oct 2026 20:08:56 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Coraza: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handling

Tue, 06 Oct 2026 20:37:54 GMT

github.com/corazawaf/coraza/v3 >=3.4.0, <3.8.0, fixed in 3.8.0. CVSS 5.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-105242: Apache log4net: Request validation failure drops the event in the aspnet-request converter

Tue, 06 Oct 2026 19:50:19 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)

Mon, 05 Oct 2026 23:42:44 GMT

vllm <0.30.0, fixed in 0.30.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-96277: Apache Thrift: Ruby `SimpleServer` ends `serve()` on any non-Transport/Protocol exception

Fri, 02 Oct 2026 12:03:23 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-90440: Apache Thrift: An exception escaping a libevent callback stops the D library's non-blocking server, allowing an unauthenticated remote attacker to deny service

Fri, 02 Oct 2026 11:44:11 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-96294: Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection

Fri, 02 Oct 2026 11:09:56 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-94651: Apache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse error

Fri, 02 Oct 2026 10:48:38 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-94639: Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget)

Fri, 02 Oct 2026 09:33:52 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

devalue: stringifyAsync can cause an unhandled rejection despite a caught returned promise

Thu, 01 Oct 2026 15:15:13 GMT

devalue >=5.8.0, <5.9.3, fixed in 5.9.3. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set

Tue, 29 Sep 2026 18:23:01 GMT

pyjwt >=2.9.0, <2.14.0, fixed in 2.14.0. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-102716: A malformed Session header permanently orphans one packet-pool block per RTSP request

Tue, 29 Sep 2026 17:43:55 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101099: ag-ui-protocol ag-ui Kotlin Community SDK SseParser.kt exceptional condition

Mon, 28 Sep 2026 17:15:15 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101017: Trusted Domain Project OpenDMARC opendmarc_policy.c strcasecmp exceptional condition

Mon, 28 Sep 2026 09:00:10 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101016: Trusted Domain Project OpenDMARC opendmarc_policy.c opendmarc_policy_parse_dmarc exceptional condition

Mon, 28 Sep 2026 08:45:11 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-63450: Suricata ftp: RETR/STOR before PORT/PASV can disable further IDS app-layer detection

Fri, 18 Sep 2026 20:13:42 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)

Thu, 17 Sep 2026 20:30:54 GMT

Steeltoe.Discovery.Consul >=4.0.0, <4.3.0, fixed in 4.3.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)

Thu, 17 Sep 2026 20:30:45 GMT

Steeltoe.Discovery.Eureka >=4.0.0, <4.3.0, fixed in 4.3.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-54578: mport verify can compare stale checksum data after hashing failures

Thu, 17 Sep 2026 16:54:20 GMT

CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-54580: mport index decompression can leave partial or corrupt index data after zstd failures

Thu, 17 Sep 2026 16:51:29 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

Panic via negative shared-string index in github.com/xuri/excelize

Wed, 16 Sep 2026 18:00:43 GMT

github.com/xuri/excelize/v2 <2.11.0, fixed in 2.11.0. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-53459: Bambuddy's authentication fails open on database errors, allowing unauthenticated access to all endpoints

Tue, 15 Sep 2026 17:25:27 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-89025: Hirschmann HiOS Switch Platform DoS via Malformed HTTP Request

Tue, 15 Sep 2026 14:13:26 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-49305: Improper handling of exceptional conditions in Huawei HarmonyOS and others

Mon, 17 Aug 2026 08:33:00 GMT

CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

baseline-browser-mapping process termination on invalid input causes denial of service

Thu, 13 Aug 2026 12:31:09 GMT

baseline-browser-mapping >=2.0.0, <2.11.0, fixed in 2.11.0. CVSS 6.6 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

SIPSorcery: Malformed UDP datagram crashes TurnServer receive loop with no restart, disabling TURN UDP relay for all clients (DoS)

Wed, 12 Aug 2026 19:31:48 GMT

SIPSorcery >=10.0.5, <10.0.14, fixed in 10.0.14. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing

Wed, 12 Aug 2026 19:30:43 GMT

SIPSorcery <10.0.14, fixed in 10.0.14. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service

Fri, 31 Jul 2026 16:20:25 GMT

github.com/pterodactyl/wings <1.13.0, fixed in 1.13.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

SIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media session (DoS)

Tue, 28 Jul 2026 17:01:19 GMT

SIPSorcery <10.0.9, fixed in 10.0.9. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-42792: epmd permanent DoS via EMFILE on accept(2) in erts

Mon, 27 Jul 2026 14:58:24 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Valibot: record() issue paths can make flatten() throw for inherited Object property names

Fri, 24 Jul 2026 16:14:31 GMT

valibot <1.4.2, fixed in 1.4.2. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-16730: Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup

Fri, 24 Jul 2026 11:26:18 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Mistune directives/include: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controlled markdown files

Mon, 20 Jul 2026 21:24:42 GMT

mistune <3.3.0, fixed in 3.3.0. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.