Advisories · Weakness

Denial of service.

Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-83416 CVE record

CVSS 4.3 Medium

Uncontrolled resource consumption in Oracle Corporation Oracle Coherence
- Oracle Corporation Oracle Coherence
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-83369 CVE record

CVSS 3.1 Low

Uncontrolled resource consumption in Oracle Corporation Oracle Access Manager
- Oracle Corporation Oracle Access Manager
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-83350 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation Oracle Database Server
- Oracle Corporation Oracle Database Server
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-83349 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation Oracle Database Server
- Oracle Corporation Oracle Database Server
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-83347 CVE record

CVSS 6.5 Medium

Uncontrolled resource consumption in Oracle Corporation Oracle Database Server
- Oracle Corporation Oracle Database Server
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-83345 CVE record

CVSS 7.1 High

Uncontrolled resource consumption in Oracle Corporation Oracle XML Gateway
- Oracle Corporation Oracle XML Gateway
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-83333 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation Oracle Database Server
- Oracle Corporation Oracle Database Server
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-83330 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation Helidon
- Oracle Corporation Helidon
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-83281 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation Helidon
- Oracle Corporation Helidon
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-83280 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation Helidon
- Oracle Corporation Helidon
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-83276 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation Helidon
- Oracle Corporation Helidon
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-83251 CVE record

CVSS 6.5 Medium

Uncontrolled resource consumption in Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience…
- Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-83248 CVE record

CVSS 8.2 High

Uncontrolled resource consumption in Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience…
- Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-83228 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-83225 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-83222 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-83183 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation Siebel CRM Deployment
- Oracle Corporation Siebel CRM Deployment
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-73960 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Denial of service
Not analysed yet 15 Sept 2026
org.http4s:http4s-ember-core_2.12 +2 Maven

CVSS 7.5 High

Http4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZE
- Denial of service
<0.23.37 · fixed in 0.23.37

GHSA-gq9p-f254-h286 · CVE-2026-88975 Not analysed yet 15 Sept 2026
org.http4s:http4s-ember-core_2.12 +2 Maven

CVSS 7.5 High

Http4s Ember HTTP/2: unbounded continuation frame accumulation
- Denial of service
<0.23.35 · fixed in 0.23.35

GHSA-cp4q-fqw9-4hf6 · CVE-2026-69218 Not analysed yet 15 Sept 2026
org.http4s:http4s-ember-core_2.12 +2 Maven

CVSS 7.5 High

Http4s Ember HTTP/2 has an unbounded outbound frame queue
- Denial of service
<0.23.35 · fixed in 0.23.35

GHSA-8f3q-3jmv-7prw · CVE-2026-69213 Not analysed yet 15 Sept 2026
org.http4s:http4s-ember-server_2.12 +2 Maven

CVSS 7.5 High

Http4s: DigestAuth nonce map grows unbounded
- Denial of service
<0.23.35 · fixed in 0.23.35

GHSA-fm4g-76c9-7w69 · CVE-2026-69208 Not analysed yet 15 Sept 2026
org.http4s:http4s-ember-core_2.12 +2 Maven

CVSS 7.5 High

Http4s Ember HTTP/2 does not enforce SETTINGS_MAX_CONCURRENT_STREAMS
- Denial of service
<0.23.35 · fixed in 0.23.35

GHSA-9vwc-pc8p-253q · CVE-2026-69203 Not analysed yet 15 Sept 2026
org.http4s:http4s-ember-core_2.12 +2 Maven

CVSS 7.5 High

Http4s Ember HTTP/2: unbounded inbound body buffering
- Denial of service
<0.23.35 · fixed in 0.23.35

GHSA-6m4x-pp6q-5jmm · CVE-2026-69202 Not analysed yet 15 Sept 2026
CVE-2026-76821 CVE record

CVSS 7.1 High

OpenCTI: User-Controlled ReDoS in JSON Ingestion Mapper
- opencti
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-76702 CVE record

CVSS 5.8 Medium

Authenticated Local Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-76700 CVE record

CVSS 5.9 Medium

Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-76696 CVE record

CVSS 6.5 Medium

Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-76693 CVE record

CVSS 7.0 High

Unauthenticated Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-76686 CVE record

CVSS 7.5 High

Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-76679 CVE record

CVSS 8.6 High

Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-69210 CVE record

CVSS 7.5 High

Http4s: WebSocket decoder accepts negative length, causing infinite decode loop
- http4s
- Denial of service
- CWE-1284
Not analysed yet 15 Sept 2026
CVE-2026-69209 CVE record

CVSS 7.5 High

Http4s: WebSocket decoder accepts unbounded message sizes
- http4s
- Denial of service
Not analysed yet 15 Sept 2026
github.com/go-vikunja/vikunja Go

CVSS 6.5 Medium

Duplicate Advisory: Vikunja: Denial of service via decompression bomb in the data import
- Denial of service
<=2.5.0 · no fixed version yet

GHSA-p4h8-xg7f-xqrc Withdrawn Not analysed yet 15 Sept 2026
code.vikunja.io/api Go

CVSS 6.5 Medium

Duplicate Advisory: Vikunja: Unbounded nested task-filter recursion permits API process termination
- Denial of service
=2.5.0 · no fixed version yet

GHSA-jfw3-2gcf-23r5 Withdrawn Not analysed yet 15 Sept 2026
code.vikunja.io/api Go

CVSS 6.5 Medium

Duplicate Advisory: Vikunja: Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API
- Denial of service
>=2.5.0 · no fixed version yet

GHSA-c2g7-39fr-cp8q Withdrawn Not analysed yet 15 Sept 2026
code.vikunja.io/api Go

CVSS 6.5 Medium

Duplicate Advisory: Vikunja: Unbounded image decode on avatar and project-background uploads enables decode/resize amplification
- Denial of service
<=2.5.0 · no fixed version yet

GHSA-69rj-q3v9-vffp Withdrawn Not analysed yet 15 Sept 2026
code.vikunja.io/api Go

CVSS 6.5 Medium

Duplicate Advisory: Vikunja: Unbounded CSV row cardinality permits API process termination
- Denial of service
=2.5.0 · no fixed version yet

GHSA-55p4-8j34-jv53 Withdrawn Not analysed yet 15 Sept 2026
CVE-2026-11926 CVE record

CVSS 7.5 High

Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
- IBM Verify Identity Access
- IBM Security Verify Access
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-12358 CVE record

CVSS 7.5 High

Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
- IBM Verify Identity Access
- IBM Security Verify Access
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-21588 CVE record

CVSS 7.1 High

Uncontrolled resource consumption in Atlassian Confluence Data Center
- Atlassian Confluence Data Center
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-91855 CVE record

CVSS 6.9 Medium

Open5GS PFCP Message handler.c denial of service
- Open5GS
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-91961 CVE record

CVSS 7.1 High

FreeRDP before 3.31.0 Denial of Service via URBDRC
- FreeRDP
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-91955 CVE record

CVSS 8.2 High

FreeRDP before 3.31.0 Denial of Service via Desktop Dimensions
- FreeRDP
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-91952 CVE record

CVSS 7.1 High

FreeRDP before 3.31.0 Denial of Service via pool_decode_rect
- FreeRDP
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-91951 CVE record

CVSS 7.1 High

FreeRDP 3.14.0 through 3.30.0 Out-of-bounds Write via urbdrc
- FreeRDP
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-91941 CVE record

CVSS 8.7 High

Crawl4AI before 0.9.3 Denial of Service via PDFContentScrapingStrategy
- unclecode crawl4ai
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-92078 CVE record

CVSS 6.5 Medium

Denial-of-service in the Security component
- Mozilla Firefox
- Mozilla Thunderbird
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-92077 CVE record

CVSS 6.5 Medium

Denial-of-service in the SVG component
- Mozilla Firefox
- Mozilla Thunderbird
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-92063 CVE record

CVSS 6.5 Medium

Denial-of-service in the Audio/Video component
- Mozilla Firefox
- Mozilla Thunderbird
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-91926 CVE record

CVSS 3.7 Low

Gss-ntlmssp: gss-ntlmssp: memory leak in ntlm_decode_target_info via duplicated av_pair entries in ntlm challenge
- Red Hat Enterprise Linux 8
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-92003 CVE record

CVSS 6.9 Medium

MISP Unthrottled Authentication Failure Log Writes Enable Resource Exhaustion
- MISP
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-80489 CVE record

CVSS 5.9 Medium

EUC_JISX0213 decoding may hang on crafted input
- The GNU C Library glibc
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-77117 CVE record

CVSS 5.9 Medium

SHIFT_JISX0213 decoding may hang on crafted input
- The GNU C Library glibc
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-91782 CVE record

CVSS 4.8 Medium

GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x86_allocate_dynrelocs null pointer dereference
- GNU Binutils
- Denial of service
- Memory corruption
Not analysed yet 15 Sept 2026
CVE-2026-91781 CVE record

CVSS 4.8 Medium

GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference
- GNU Binutils
- Denial of service
- Memory corruption
Not analysed yet 15 Sept 2026
CVE-2026-91780 CVE record

CVSS 4.8 Medium

GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference
- GNU Binutils
- Denial of service
- Memory corruption
Not analysed yet 15 Sept 2026
CVE-2026-91779 CVE record

CVSS 4.8 Medium

GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference
- GNU Binutils
- Denial of service
- Memory corruption
Not analysed yet 15 Sept 2026
CVE-2026-90878 CVE record

CVSS 5.3 Medium

vllm-project vLLM Jinja Template Rendering completions resource consumption
- vLLM
- Denial of service
Not analysed yet 15 Sept 2026
CVE-2026-91752 CVE record

CVSS 8.7 High

GNU libextractor before 1.15 Stack Overflow via OLE2
- GNU libextractor
- Denial of service
Not analysed yet 15 Sept 2026