# Denial of service. Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [ColdFusion | Uncontrolled Resource Consumption (CWE-400)](https://agentprime.io/advisories/CVE-2026-76000.md) `CVE-2026-76000` · CVE record: Adobe ColdFusion 2025 and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing](https://agentprime.io/advisories/GHSA-fccg-mwvh-qqg4.md) `GHSA-fccg-mwvh-qqg4`, `CVE-2026-75596` · Maven `io.netty:netty-handler`: affected `>=4.2.0.Final, <4.2.17.Final || <4.1.137.Final`, fixed in `4.2.17.Final`, `4.1.137.Final` · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [LiquidJS: Uncontrolled Resource Consumption in \`join\` filter allows template authors to bypass \`memoryLimit\` and crash the process](https://agentprime.io/advisories/GHSA-4r6h-5v86-94p3.md) `GHSA-4r6h-5v86-94p3`, `CVE-2026-69222` · npm `liquidjs`: affected `<10.27.2`, fixed in `10.27.2` · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Resource allocation without limits in Google Android](https://agentprime.io/advisories/CVE-2026-28633.md) `CVE-2026-28633` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Google Android](https://agentprime.io/advisories/CVE-2026-28617.md) `CVE-2026-28617` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Google Android](https://agentprime.io/advisories/CVE-2026-28596.md) `CVE-2026-28596` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83968.md) `CVE-2026-83968` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service, Memory corruption - [ASP.NET Core Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-57099.md) `CVE-2026-57099` · CVE record: Microsoft AspNetCore.OData · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-72931.md) `CVE-2026-72931` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Windows DHCP Client Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-69781.md) `CVE-2026-69781` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Windows Active Directory Domain Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-69809.md) `CVE-2026-69809` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Windows DHCP Server Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-69497.md) `CVE-2026-69497` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Windows DHCP Server Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-69405.md) `CVE-2026-69405` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Windows SMB Server Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-69374.md) `CVE-2026-69374` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Windows DHCP Server Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-70065.md) `CVE-2026-70065` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Active Directory Federation Services (AD FS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-72978.md) `CVE-2026-72978` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Microsoft Exchange Server Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-69378.md) `CVE-2026-69378` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Windows TCP/IP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-69588.md) `CVE-2026-69588` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses](https://agentprime.io/advisories/GHSA-97qj-x29f-37w7.md) `GHSA-97qj-x29f-37w7`, `CVE-2026-78681`, `PYSEC-2026-3748` · PyPI `nltk`: affected `<3.10.3`, fixed in `3.10.3` · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Uncontrolled Resource Consumption in MongoDB Sharded Cluster Router Allows Unauthenticated Denial of Service](https://agentprime.io/advisories/CVE-2026-82075.md) `CVE-2026-82075` · CVE record: MongoDB MongoDB Server · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Persistent Fatal Assertion Crash in MongoDB Server via Crafted Retryable Write Commands Leads to Denial of Service](https://agentprime.io/advisories/CVE-2026-82068.md) `CVE-2026-82068` · CVE record: MongoDB MongoDB Server · CVSS 7.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata](https://agentprime.io/advisories/CVE-2026-82065.md) `CVE-2026-82065` · CVE record: MongoDB MongoDB Server · CVSS 7.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Unauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set Members](https://agentprime.io/advisories/CVE-2026-82064.md) `CVE-2026-82064` · CVE record: MongoDB MongoDB Server · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Improper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of Service](https://agentprime.io/advisories/CVE-2026-82059.md) `CVE-2026-82059` · CVE record: MongoDB MongoDB Server · CVSS 6.0 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Service](https://agentprime.io/advisories/CVE-2026-82054.md) `CVE-2026-82054` · CVE record: MongoDB MongoDB Server · CVSS 7.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [$regexFindAll may crash mongod server when byte-matching multi-byte UTF-8 chars](https://agentprime.io/advisories/CVE-2026-82052.md) `CVE-2026-82052` · CVE record: MongoDB MongoDB Server · CVSS 7.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Excessive iteration in NVIDIA Triton Inference Server](https://agentprime.io/advisories/CVE-2026-16497.md) `CVE-2026-16497` · CVE record: NVIDIA Triton Inference Server · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Snipe-IT before 8.7.1 Denial of Service via Unbounded Note Field](https://agentprime.io/advisories/CVE-2026-86734.md) `CVE-2026-86734` · CVE record: grokability snipe-it · CVSS 7.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of Service](https://agentprime.io/advisories/CVE-2026-86135.md) `CVE-2026-86135` · CVE record: WatchGuard Dimension · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Cross-site request forgery (CSRF), Denial of service - [XenForo < 2.3.13 Uncontrolled Recursion DoS via BBCode Parser](https://agentprime.io/advisories/CVE-2026-73321.md) `CVE-2026-73321` · CVE record: XenForo XenForo · CVSS 7.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Eclipse Foundation Eclipse Jetty](https://agentprime.io/advisories/CVE-2026-12611.md) `CVE-2026-12611` · CVE record: Eclipse Foundation Eclipse Jetty · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml)](https://agentprime.io/advisories/CVE-2026-11573.md) `CVE-2026-11573` · CVE record: qt qt · CVSS 7.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Resource allocation without limits in Siemens Reyrolle 7SR5](https://agentprime.io/advisories/CVE-2026-62649.md) `CVE-2026-62649` · CVE record: Siemens Reyrolle 7SR5 · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [WordPress WooCommerce plugin < 11.1.0 - Denial of Service Attack vulnerability](https://agentprime.io/advisories/CVE-2026-48888.md) `CVE-2026-48888` · CVE record: Automattic WooCommerce · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [vgmstream txtp txtp_parser.c add_entry resource consumption](https://agentprime.io/advisories/CVE-2026-86515.md) `CVE-2026-86515` · CVE record: vgmstream · CVSS 5.3 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [java-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePointer.tokensFromInput allocation of resources](https://agentprime.io/advisories/CVE-2026-86513.md) `CVE-2026-86513` · CVE record: java-json-tools jackson-coreutils · CVSS 6.9 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Resource allocation without limits in ASUS Armoury Crate](https://agentprime.io/advisories/CVE-2026-75808.md) `CVE-2026-75808` · CVE record: ASUS Armoury Crate · CVSS 5.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [java-json-tools jackson-coreutils JacksonUtils.java BigDecimal.toPlainString resource consumption](https://agentprime.io/advisories/CVE-2026-86511.md) `CVE-2026-86511` · CVE record: java-json-tools jackson-coreutils · CVSS 6.9 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Denial of Service vulnerability in SAP Process Integration (SOAP Adapter)](https://agentprime.io/advisories/CVE-2026-58234.md) `CVE-2026-58234` · CVE record: SAP_SE SAP Process Integration (SOAP Adapter) · CVSS 2.2 Low · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [A buffer overflow in the SBC_DecodeFrames() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier and fixed in v.5.0 allows attackers to cause a Denial of Service (DoS…](https://agentprime.io/advisories/CVE-2026-79379.md) `CVE-2026-79379` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [An issue in the btm_acl_handle() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP…](https://agentprime.io/advisories/CVE-2026-79378.md) `CVE-2026-79378` · CVE record · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service - [Unauthenticated authorize requests create unbounded, never-expiring CIMD client rows and cache entries in ash_authentication_oauth2_server](https://agentprime.io/advisories/GHSA-9pv3-wxjm-f846.md) `GHSA-9pv3-wxjm-f846`, `CVE-2026-82753`, `EEF-CVE-2026-82753` · Hex `ash_authentication_oauth2_server`: affected `>=0.3.0, <0.3.1`, fixed in `0.3.1` · CVSS 8.2 High · Not analysed yet · Published 7 Sept 2026 · Tags: Denial of service - [Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream table](https://agentprime.io/advisories/CVE-2026-16028.md) `CVE-2026-16028` · CVE record · CVSS 7.5 High · Not analysed yet · Published 7 Sept 2026 · Tags: Denial of service - [java-json-tools json-patch Patch Operation JsonPatch.java JsonPatch.apply resource consumption](https://agentprime.io/advisories/CVE-2026-86319.md) `CVE-2026-86319` · CVE record: java-json-tools json-patch · CVSS 6.9 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Denial of service - [ggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tensor assertion](https://agentprime.io/advisories/CVE-2026-86317.md) `CVE-2026-86317` · CVE record: ggml-org llama.cpp · CVSS 6.9 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Denial of service - [MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding](https://agentprime.io/advisories/CVE-2026-86452.md) `CVE-2026-86452` · CVE record: MISP MISP · CVSS 8.7 High · Not analysed yet · Published 7 Sept 2026 · Tags: Denial of service - [commonmark 1.5.0 before 2.8.4 Denial of Service via Footnote](https://agentprime.io/advisories/CVE-2026-86435.md) `CVE-2026-86435` · CVE record: thephpleague commonmark · CVSS 8.7 High · Not analysed yet · Published 7 Sept 2026 · Tags: Denial of service - [commonmark 1.5.0 before 2.8.4 Denial of Service via Attributes](https://agentprime.io/advisories/CVE-2026-86433.md) `CVE-2026-86433` · CVE record: thephpleague commonmark · CVSS 8.7 High · Not analysed yet · Published 7 Sept 2026 · Tags: Denial of service - [ImageMagick before 7.1.2-30 Memory Leak via MSL decoder](https://agentprime.io/advisories/CVE-2026-86421.md) `CVE-2026-86421` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Denial of service - [ImageMagick before 7.1.2-30 Denial of Service Memory Budget](https://agentprime.io/advisories/CVE-2026-86420.md) `CVE-2026-86420` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Denial of service - [HCL MyXalytics is affected by multiple security vulnerabilities.](https://agentprime.io/advisories/CVE-2025-52657.md) `CVE-2025-52657` · CVE record: HCL Software MyXalytics · CVSS 3.5 Low · Not analysed yet · Published 7 Sept 2026 · Tags: Denial of service - [Resource allocation without limits in Eclipse Foundation Eclipse Jetty](https://agentprime.io/advisories/CVE-2026-19204.md) `CVE-2026-19204` · CVE record: Eclipse Foundation Eclipse Jetty · CVSS 8.7 High · Not analysed yet · Published 7 Sept 2026 · Tags: Denial of service - [Eclipse Foundation Eclipse Ankaios: In Eclipse Ankaios versions 0.1.0 through 1.0.1…](https://agentprime.io/advisories/CVE-2026-85201.md) `CVE-2026-85201` · CVE record: Eclipse Foundation Eclipse Ankaios · CVSS 6.8 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Denial of service, CWE-1284 - [MISP Missing Authorization on Template File Upload Allows Authenticated Disk Exhaustion](https://agentprime.io/advisories/CVE-2026-86347.md) `CVE-2026-86347` · CVE record: MISP MISP · CVSS 7.1 High · Not analysed yet · Published 7 Sept 2026 · Tags: Denial of service, Broken access control - [Reachable assertion in MediaTek, Inc. MediaTek chipset](https://agentprime.io/advisories/CVE-2026-20504.md) `CVE-2026-20504` · CVE record: MediaTek, Inc. MediaTek chipset · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Denial of service - [Reachable assertion in MediaTek, Inc. MediaTek chipset](https://agentprime.io/advisories/CVE-2026-20503.md) `CVE-2026-20503` · CVE record: MediaTek, Inc. MediaTek chipset · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Denial of service - [Duplicate Advisory: H3: Unbounded Chunked Cookie Count in Session Cleanup Loop may Lead to Denial of Service](https://agentprime.io/advisories/GHSA-fg72-q65g-wm5w.md) `GHSA-fg72-q65g-wm5w` · npm `h3`: affected `>=2.0.0-beta.4`, no fixed version yet · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 6 Sept 2026 · Tags: Denial of service - [PocketMine-MP before 4.12.3 Denial of Service via Unauthenticated Sessions](https://agentprime.io/advisories/CVE-2022-51008.md) `CVE-2022-51008` · CVE record: pmmp PocketMine-MP · CVSS 6.9 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Denial of service - [rpcapd memory leak in libpcap before 1.10.7](https://agentprime.io/advisories/CVE-2026-18313.md) `CVE-2026-18313` · CVE record: The Tcpdump Group libpcap · CVSS 4.3 Medium · Not analysed yet · Published 5 Sept 2026 · Tags: Denial of service - [infinte loop in libpcap before 1.10.7](https://agentprime.io/advisories/CVE-2026-6554.md) `CVE-2026-6554` · CVE record: The Tcpdump Group libpcap · CVSS 7.5 High · Not analysed yet · Published 5 Sept 2026 · Tags: Denial of service Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .