# Denial of service. Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72667.md) `CVE-2026-72667` · CVE record: Elastic Kibana · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72674.md) `CVE-2026-72674` · CVE record: Elastic Kibana · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Uncontrolled Recursion in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72679.md) `CVE-2026-72679` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72678.md) `CVE-2026-72678` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72687.md) `CVE-2026-72687` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Uncontrolled Recursion in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72686.md) `CVE-2026-72686` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Inefficient Algorithmic Complexity in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72685.md) `CVE-2026-72685` · CVE record: Elastic Elasticsearch · CVSS 4.3 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72684.md) `CVE-2026-72684` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Uncontrolled Recursion in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72683.md) `CVE-2026-72683` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-49089.md) `CVE-2026-49089` · CVE record: Elastic Kibana · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Calix GigaSpire Web Management utilities_configurationsave.cgi denial of service](https://agentprime.io/advisories/CVE-2026-19745.md) `CVE-2026-19745` · CVE record: Calix GigaSpire · CVSS 5.3 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [IBM i is Affected By Multiple Vulnerabilities in Host Servers](https://agentprime.io/advisories/CVE-2026-17004.md) `CVE-2026-17004` · CVE record: IBM i · CVSS 7.5 High · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [IBM i is Affected By Multiple Vulnerabilities in Host Servers](https://agentprime.io/advisories/CVE-2026-17199.md) `CVE-2026-17199` · CVE record: IBM i · CVSS 7.5 High · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [IBM i is Affected By Multiple Vulnerabilities in Host Servers](https://agentprime.io/advisories/CVE-2026-17229.md) `CVE-2026-17229` · CVE record: IBM i · CVSS 7.5 High · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [vLLM: Completion prompt lists fan out into unbounded engine requests](https://agentprime.io/advisories/GHSA-87x5-vmc3-756j.md) `GHSA-87x5-vmc3-756j`, `CVE-2026-73559`, `PYSEC-2026-3704` · PyPI `vllm`: affected `>=0.19.0, <0.26.0`, fixed in `0.26.0` · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Infinite loop (DoS) in Bluetooth GATT client parsing of Read-By-Type responses with zero data length](https://agentprime.io/advisories/CVE-2026-12236.md) `CVE-2026-12236` · CVE record: zephyrproject zephyr · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [rsync < 3.5.0 Algorithmic Complexity DoS via hash_search()](https://agentprime.io/advisories/CVE-2026-70453.md) `CVE-2026-70453` · CVE record: RsyncProject rsync · CVSS 8.7 High · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion](https://agentprime.io/advisories/CVE-2026-70455.md) `CVE-2026-70455` · CVE record: RsyncProject rsync · CVSS 8.7 High · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [rsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUT](https://agentprime.io/advisories/CVE-2026-70462.md) `CVE-2026-70462` · CVE record: RsyncProject rsync · CVSS 7.1 High · Not analysed yet · Published 13 Aug 2026 · Tags: Memory corruption, Denial of service - [rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall](https://agentprime.io/advisories/CVE-2026-70464.md) `CVE-2026-70464` · CVE record: RsyncProject rsync · CVSS 8.7 High · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Unbounded Memory Growth in QUIC Server Incoming Channel Queue](https://agentprime.io/advisories/CVE-2026-14456.md) `CVE-2026-14456` · CVE record: OpenSSL OpenSSL · CVSS 7.5 High · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in RubyLLM::Utils.underscore on Ruby 3.1.x.](https://agentprime.io/advisories/CVE-2026-67991.md) `CVE-2026-67991` · CVE record · CVSS 7.5 High · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Acm-search-v2-api-rhel9: search-v2-api: unbounded tokenreviews cache allows unauthenticated memory-exhaustion dos](https://agentprime.io/advisories/CVE-2026-71469.md) `CVE-2026-71469` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service - [Open-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsing](https://agentprime.io/advisories/CVE-2026-18726.md) `CVE-2026-18726` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service - [IBM® Db2® could allow a local attacker to cause a denial of service due to a memory leak](https://agentprime.io/advisories/CVE-2026-18096.md) `CVE-2026-18096` · CVE record: IBM Db2 · CVSS 3.3 Low · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service - [Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access](https://agentprime.io/advisories/CVE-2026-11932.md) `CVE-2026-11932` · CVE record: IBM Security Verify Access and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service - [Storage volume cross-project move and snapshot restore bypass project disk limits](https://agentprime.io/advisories/CVE-2026-63299.md) `CVE-2026-63299` · CVE record: Canonical LXD · CVSS 8.5 High · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service - [Allocation of Resources Without Limits or Throttling in GitLab](https://agentprime.io/advisories/CVE-2026-7427.md) `CVE-2026-7427` · CVE record: GitLab GitLab · CVSS 5.3 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service - [IBM i is Affected By Multiple Vulnerabilities in the Debug Server](https://agentprime.io/advisories/CVE-2026-17271.md) `CVE-2026-17271` · CVE record: IBM i · CVSS 7.5 High · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service - [IBM i is Affected By A Denial of Service Vulnerability \[\]](https://agentprime.io/advisories/CVE-2026-16931.md) `CVE-2026-16931` · CVE record: IBM i · CVSS 7.5 High · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service - [Resource allocation without limits in Fortinet FortiOS](https://agentprime.io/advisories/CVE-2026-71408.md) `CVE-2026-71408` · CVE record: Fortinet FortiOS · CVSS 5.0 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service - [Velociraptor DoS triggered by Divide by Zero panic](https://agentprime.io/advisories/CVE-2026-64951.md) `CVE-2026-64951` · CVE record: Rapid7 Velociraptor · CVSS 3.5 Low · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service - [Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths](https://agentprime.io/advisories/CVE-2026-19566.md) `CVE-2026-19566` · CVE record: RRWO Net::CIDR::Set · CVSS 7.5 High · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service, CWE-1284 - [Unauthenticated Denial of Service](https://agentprime.io/advisories/CVE-2025-41770.md) `CVE-2025-41770` · CVE record: Phoenix Contact AXC F 1152 and 4 more · CVSS 8.7 High · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service - [Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of service](https://agentprime.io/advisories/CVE-2025-15687.md) `CVE-2025-15687` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service - [Open5GS HSS Service fd_msg_sess_get denial of service](https://agentprime.io/advisories/CVE-2025-15686.md) `CVE-2025-15686` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Samsung Open Source rlottie](https://agentprime.io/advisories/CVE-2026-19587.md) `CVE-2026-19587` · CVE record: Samsung Open Source rlottie · CVSS 6.5 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service - [Open5GS CER init.c diam_log_func assertion](https://agentprime.io/advisories/CVE-2025-15684.md) `CVE-2025-15684` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service - [Malcolm has Uncontrolled Resource Consumption in Archive Extraction (Inode-Exhaustion DoS)](https://agentprime.io/advisories/CVE-2026-63133.md) `CVE-2026-63133` · CVE record: cisagov Malcolm · CVSS 7.1 High · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service - [Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos](https://agentprime.io/advisories/CVE-2026-18697.md) `CVE-2026-18697` · CVE record: MongoDB MongoDB Server · CVSS 8.7 High · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service - [Improper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Service](https://agentprime.io/advisories/CVE-2026-18695.md) `CVE-2026-18695` · CVE record: MongoDB MongoDB Server · CVSS 7.1 High · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service - [Improper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of Service](https://agentprime.io/advisories/CVE-2026-18707.md) `CVE-2026-18707` · CVE record: MongoDB MongoDB Server · CVSS 5.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service - [coturn: mobility disconnects bypass allocation quotas and exhaust relay capacity](https://agentprime.io/advisories/CVE-2026-73216.md) `CVE-2026-73216` · CVE record: coturn coturn · CVSS 6.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service - [The coturn server can end in a state where it does not accept more requests with "even-port" enabled.](https://agentprime.io/advisories/CVE-2026-73215.md) `CVE-2026-73215` · CVE record: coturn coturn · CVSS 7.1 High · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service - [Nmap 7.99 Denial of Service via Zero-Length TCP Option Packet](https://agentprime.io/advisories/CVE-2026-72712.md) `CVE-2026-72712` · CVE record: Nmap Project Nmap · CVSS 6.9 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service - [coturn allocates a full per-peer SSL/session before verifying the DTLS cookie, enabling source-spoofing/botnet state-exhaustion DoS](https://agentprime.io/advisories/CVE-2026-73214.md) `CVE-2026-73214` · CVE record: coturn coturn · CVSS 8.2 High · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service - [Windows DHCP Client Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-65785.md) `CVE-2026-65785` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service - [Remote Procedure Call Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-54113.md) `CVE-2026-54113` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service - [CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)](https://agentprime.io/advisories/CVE-2026-48434.md) `CVE-2026-48434` · CVE record: Adobe Content Credentials Rust SDK and 2 more · CVSS 6.2 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service - [CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)](https://agentprime.io/advisories/CVE-2026-48443.md) `CVE-2026-48443` · CVE record: Adobe Content Credentials Rust SDK and 2 more · CVSS 6.2 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service - [CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)](https://agentprime.io/advisories/CVE-2026-48439.md) `CVE-2026-48439` · CVE record: Adobe Content Credentials Rust SDK and 2 more · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Intel(R) PROSet/Wireless WiFi Software for Windows](https://agentprime.io/advisories/CVE-2026-20780.md) `CVE-2026-20780` · CVE record: Intel(R) PROSet/Wireless WiFi Software for Windows · CVSS 6.9 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service - [Velociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS Volumes](https://agentprime.io/advisories/CVE-2026-17535.md) `CVE-2026-17535` · CVE record: Rapid7 Velociraptor · CVSS 6.2 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption, Denial of service - [Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustion](https://agentprime.io/advisories/CVE-2026-71218.md) `CVE-2026-71218` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service - [Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener](https://agentprime.io/advisories/CVE-2026-15567.md) `CVE-2026-15567` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service - [Undertow-core: oom via missing limits in chunked trailer in eap's undertow](https://agentprime.io/advisories/CVE-2026-15561.md) `CVE-2026-15561` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service - [Claircore: claircore: denial of service via unchecked type assertion in rpm header parser](https://agentprime.io/advisories/CVE-2026-19519.md) `CVE-2026-19519` · CVE record: Red Hat Red Hat Advanced Cluster Security 4 and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service - [Resource allocation without limits in Samsung Open Source rlottie](https://agentprime.io/advisories/CVE-2026-19517.md) `CVE-2026-19517` · CVE record: Samsung Open Source rlottie · CVSS 6.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service, CWE-1284 - [Multiple vulnerabilities in SAP Business AI Platform (Approuter)](https://agentprime.io/advisories/CVE-2026-66761.md) `CVE-2026-66761` · CVE record: SAP_SE SAP Business AI Platform (Approuter) · CVSS 4.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service - [Multiple vulnerabilities in SAP Business AI Platform (Approuter)](https://agentprime.io/advisories/CVE-2026-58238.md) `CVE-2026-58238` · CVE record: SAP_SE SAP Business AI Platform (Approuter) · CVSS 5.9 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .