# Denial of service. Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [Uncontrolled resource consumption in Oracle Corporation Oracle Coherence](https://agentprime.io/advisories/CVE-2026-83416.md) `CVE-2026-83416` · CVE record: Oracle Corporation Oracle Coherence · CVSS 4.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Oracle Corporation Oracle Access Manager](https://agentprime.io/advisories/CVE-2026-83369.md) `CVE-2026-83369` · CVE record: Oracle Corporation Oracle Access Manager · CVSS 3.1 Low · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Oracle Corporation Oracle Database Server](https://agentprime.io/advisories/CVE-2026-83350.md) `CVE-2026-83350` · CVE record: Oracle Corporation Oracle Database Server · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Oracle Corporation Oracle Database Server](https://agentprime.io/advisories/CVE-2026-83349.md) `CVE-2026-83349` · CVE record: Oracle Corporation Oracle Database Server · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Oracle Corporation Oracle Database Server](https://agentprime.io/advisories/CVE-2026-83347.md) `CVE-2026-83347` · CVE record: Oracle Corporation Oracle Database Server · CVSS 6.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Oracle Corporation Oracle XML Gateway](https://agentprime.io/advisories/CVE-2026-83345.md) `CVE-2026-83345` · CVE record: Oracle Corporation Oracle XML Gateway · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Oracle Corporation Oracle Database Server](https://agentprime.io/advisories/CVE-2026-83333.md) `CVE-2026-83333` · CVE record: Oracle Corporation Oracle Database Server · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Oracle Corporation Helidon](https://agentprime.io/advisories/CVE-2026-83330.md) `CVE-2026-83330` · CVE record: Oracle Corporation Helidon · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Oracle Corporation Helidon](https://agentprime.io/advisories/CVE-2026-83281.md) `CVE-2026-83281` · CVE record: Oracle Corporation Helidon · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Oracle Corporation Helidon](https://agentprime.io/advisories/CVE-2026-83280.md) `CVE-2026-83280` · CVE record: Oracle Corporation Helidon · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Oracle Corporation Helidon](https://agentprime.io/advisories/CVE-2026-83276.md) `CVE-2026-83276` · CVE record: Oracle Corporation Helidon · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience…](https://agentprime.io/advisories/CVE-2026-83251.md) `CVE-2026-83251` · CVE record: Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience Manager · CVSS 6.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience…](https://agentprime.io/advisories/CVE-2026-83248.md) `CVE-2026-83248` · CVE record: Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience Manager · CVSS 8.2 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-83228.md) `CVE-2026-83228` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-83225.md) `CVE-2026-83225` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-83222.md) `CVE-2026-83222` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-83183.md) `CVE-2026-83183` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Oracle Corporation PeopleSoft Enterprise PeopleTools](https://agentprime.io/advisories/CVE-2026-73960.md) `CVE-2026-73960` · CVE record: Oracle Corporation PeopleSoft Enterprise PeopleTools · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Http4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZE](https://agentprime.io/advisories/GHSA-gq9p-f254-h286.md) `GHSA-gq9p-f254-h286`, `CVE-2026-88975` · Maven `org.http4s:http4s-ember-core_2.12` and 2 more: affected `<0.23.37`, fixed in `0.23.37` · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Http4s Ember HTTP/2: unbounded continuation frame accumulation](https://agentprime.io/advisories/GHSA-cp4q-fqw9-4hf6.md) `GHSA-cp4q-fqw9-4hf6`, `CVE-2026-69218` · Maven `org.http4s:http4s-ember-core_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Http4s Ember HTTP/2 has an unbounded outbound frame queue](https://agentprime.io/advisories/GHSA-8f3q-3jmv-7prw.md) `GHSA-8f3q-3jmv-7prw`, `CVE-2026-69213` · Maven `org.http4s:http4s-ember-core_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Http4s: DigestAuth nonce map grows unbounded](https://agentprime.io/advisories/GHSA-fm4g-76c9-7w69.md) `GHSA-fm4g-76c9-7w69`, `CVE-2026-69208` · Maven `org.http4s:http4s-ember-server_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Http4s Ember HTTP/2 does not enforce SETTINGS_MAX_CONCURRENT_STREAMS](https://agentprime.io/advisories/GHSA-9vwc-pc8p-253q.md) `GHSA-9vwc-pc8p-253q`, `CVE-2026-69203` · Maven `org.http4s:http4s-ember-core_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Http4s Ember HTTP/2: unbounded inbound body buffering](https://agentprime.io/advisories/GHSA-6m4x-pp6q-5jmm.md) `GHSA-6m4x-pp6q-5jmm`, `CVE-2026-69202` · Maven `org.http4s:http4s-ember-core_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [OpenCTI: User-Controlled ReDoS in JSON Ingestion Mapper](https://agentprime.io/advisories/CVE-2026-76821.md) `CVE-2026-76821` · CVE record: OpenCTI-Platform opencti · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Authenticated Local Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways](https://agentprime.io/advisories/CVE-2026-76702.md) `CVE-2026-76702` · CVE record: Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways · CVSS 5.8 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways](https://agentprime.io/advisories/CVE-2026-76700.md) `CVE-2026-76700` · CVE record: Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways · CVSS 5.9 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways](https://agentprime.io/advisories/CVE-2026-76696.md) `CVE-2026-76696` · CVE record: Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways · CVSS 6.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Unauthenticated Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways](https://agentprime.io/advisories/CVE-2026-76693.md) `CVE-2026-76693` · CVE record: Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways · CVSS 7.0 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways](https://agentprime.io/advisories/CVE-2026-76686.md) `CVE-2026-76686` · CVE record: Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways](https://agentprime.io/advisories/CVE-2026-76679.md) `CVE-2026-76679` · CVE record: Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways · CVSS 8.6 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Http4s: WebSocket decoder accepts negative length, causing infinite decode loop](https://agentprime.io/advisories/CVE-2026-69210.md) `CVE-2026-69210` · CVE record: http4s http4s · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service, CWE-1284 - [Http4s: WebSocket decoder accepts unbounded message sizes](https://agentprime.io/advisories/CVE-2026-69209.md) `CVE-2026-69209` · CVE record: http4s http4s · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Duplicate Advisory: Vikunja: Denial of service via decompression bomb in the data import](https://agentprime.io/advisories/GHSA-p4h8-xg7f-xqrc.md) `GHSA-p4h8-xg7f-xqrc` · Go `github.com/go-vikunja/vikunja`: affected `<=2.5.0`, no fixed version yet · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Duplicate Advisory: Vikunja: Unbounded nested task-filter recursion permits API process termination](https://agentprime.io/advisories/GHSA-jfw3-2gcf-23r5.md) `GHSA-jfw3-2gcf-23r5` · Go `code.vikunja.io/api`: affected `=2.5.0`, no fixed version yet · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Duplicate Advisory: Vikunja: Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API](https://agentprime.io/advisories/GHSA-c2g7-39fr-cp8q.md) `GHSA-c2g7-39fr-cp8q` · Go `code.vikunja.io/api`: affected `>=2.5.0`, no fixed version yet · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Duplicate Advisory: Vikunja: Unbounded image decode on avatar and project-background uploads enables decode/resize amplification](https://agentprime.io/advisories/GHSA-69rj-q3v9-vffp.md) `GHSA-69rj-q3v9-vffp` · Go `code.vikunja.io/api`: affected `<=2.5.0`, no fixed version yet · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Duplicate Advisory: Vikunja: Unbounded CSV row cardinality permits API process termination](https://agentprime.io/advisories/GHSA-55p4-8j34-jv53.md) `GHSA-55p4-8j34-jv53` · Go `code.vikunja.io/api`: affected `=2.5.0`, no fixed version yet · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access](https://agentprime.io/advisories/CVE-2026-11926.md) `CVE-2026-11926` · CVE record: IBM Verify Identity Access and 3 more · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access](https://agentprime.io/advisories/CVE-2026-12358.md) `CVE-2026-12358` · CVE record: IBM Verify Identity Access and 3 more · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Atlassian Confluence Data Center](https://agentprime.io/advisories/CVE-2026-21588.md) `CVE-2026-21588` · CVE record: Atlassian Confluence Data Center · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Open5GS PFCP Message handler.c denial of service](https://agentprime.io/advisories/CVE-2026-91855.md) `CVE-2026-91855` · CVE record: Open5GS · CVSS 6.9 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [FreeRDP before 3.31.0 Denial of Service via URBDRC](https://agentprime.io/advisories/CVE-2026-91961.md) `CVE-2026-91961` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [FreeRDP before 3.31.0 Denial of Service via Desktop Dimensions](https://agentprime.io/advisories/CVE-2026-91955.md) `CVE-2026-91955` · CVE record: FreeRDP FreeRDP · CVSS 8.2 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [FreeRDP before 3.31.0 Denial of Service via pool_decode_rect](https://agentprime.io/advisories/CVE-2026-91952.md) `CVE-2026-91952` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [FreeRDP 3.14.0 through 3.30.0 Out-of-bounds Write via urbdrc](https://agentprime.io/advisories/CVE-2026-91951.md) `CVE-2026-91951` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Crawl4AI before 0.9.3 Denial of Service via PDFContentScrapingStrategy](https://agentprime.io/advisories/CVE-2026-91941.md) `CVE-2026-91941` · CVE record: unclecode crawl4ai · CVSS 8.7 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Denial-of-service in the Security component](https://agentprime.io/advisories/CVE-2026-92078.md) `CVE-2026-92078` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Denial-of-service in the SVG component](https://agentprime.io/advisories/CVE-2026-92077.md) `CVE-2026-92077` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Denial-of-service in the Audio/Video component](https://agentprime.io/advisories/CVE-2026-92063.md) `CVE-2026-92063` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [Gss-ntlmssp: gss-ntlmssp: memory leak in ntlm_decode_target_info via duplicated av_pair entries in ntlm challenge](https://agentprime.io/advisories/CVE-2026-91926.md) `CVE-2026-91926` · CVE record: Red Hat Red Hat Enterprise Linux 8 · CVSS 3.7 Low · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [MISP Unthrottled Authentication Failure Log Writes Enable Resource Exhaustion](https://agentprime.io/advisories/CVE-2026-92003.md) `CVE-2026-92003` · CVE record: MISP MISP · CVSS 6.9 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [EUC_JISX0213 decoding may hang on crafted input](https://agentprime.io/advisories/CVE-2026-80489.md) `CVE-2026-80489` · CVE record: The GNU C Library glibc · CVSS 5.9 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [SHIFT_JISX0213 decoding may hang on crafted input](https://agentprime.io/advisories/CVE-2026-77117.md) `CVE-2026-77117` · CVE record: The GNU C Library glibc · CVSS 5.9 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x86_allocate_dynrelocs null pointer dereference](https://agentprime.io/advisories/CVE-2026-91782.md) `CVE-2026-91782` · CVE record: GNU Binutils · CVSS 4.8 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service, Memory corruption - [GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference](https://agentprime.io/advisories/CVE-2026-91781.md) `CVE-2026-91781` · CVE record: GNU Binutils · CVSS 4.8 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service, Memory corruption - [GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference](https://agentprime.io/advisories/CVE-2026-91780.md) `CVE-2026-91780` · CVE record: GNU Binutils · CVSS 4.8 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service, Memory corruption - [GNU Binutils Eh Frame elf-eh-frame.c \_bfd_elf_eh_frame_section_offset null pointer dereference](https://agentprime.io/advisories/CVE-2026-91779.md) `CVE-2026-91779` · CVE record: GNU Binutils · CVSS 4.8 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service, Memory corruption - [vllm-project vLLM Jinja Template Rendering completions resource consumption](https://agentprime.io/advisories/CVE-2026-90878.md) `CVE-2026-90878` · CVE record: vllm-project vLLM · CVSS 5.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [GNU libextractor before 1.15 Stack Overflow via OLE2](https://agentprime.io/advisories/CVE-2026-91752.md) `CVE-2026-91752` · CVE record: GNU libextractor · CVSS 8.7 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .