CVE-2026-15890 AEAD nonce reuse in Zephyr secure_storage ITS default nonce provider due to missing thread synchronization

The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, securestorageitstransformaeadgetnonce in subsys/securestorage/src/its/transform/aeadget.c, stores its nonce counter in unsynchronized function-local static variables snonce and snonceinitialized. Every ITS writ...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the absence of a total timeout in the remote policy fetch process. An attacker can cause the application to hang indefinitely by making a server respond extremely slowly, there...

CVE-2026-91867

When Neethi fetches a remote policy reference, it only limits the time per read, not the whole transfer, so a server that trickles bytes slowly can keep the fetch alive indefinitely and tie up the calling thread denial of service. Users are recommended to upgrade to version 3.2.4, which fixes thi...

CVE-2026-91863

A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread stack, crashing the parser denial of service. Users are recommended to upgrade to version 3.2.4, which fixes this issue...

CVE-2026-91867 Apache Neethi: Remote policy fetch lacks a total timeout, allowing a slow server to hang the request indefinitely

When Neethi fetches a remote policy reference, it only limits the time per read, not the whole transfer, so a server that trickles bytes slowly can keep the fetch alive indefinitely and tie up the calling thread denial of service. Users are recommended to upgrade to version 3.2.4, which fixes thi...

EUVD-2026-83885

A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread stack, crashing the parser denial of service. Users are recommended to upgrade to version 3.2.4, which fixes this issue...

CVE-2026-91863 Apache Neethi: Uncontrolled recursion while parsing crafted WS-Policy documents allows denial of service

A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread stack, crashing the parser denial of service. Users are recommended to upgrade to version 3.2.4, which fixes this issue...

CVE-2026-91863: Uncontrolled Recursion

A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread stack, crashing the parser denial of service. Users are recommended to upgrade to version 3.2.4, which fixes this issue...

PT-2026-96080

Name of the Vulnerable Software and Affected Versions Neethi versions prior to 3.2.4 Description A specially crafted WS-Policy document containing deeply nested policy elements can bypass the nesting-depth limit. This leads to thread stack exhaustion, which crashes the parser and results in a...

PT-2026-96273

Name of the Vulnerable Software and Affected Versions Espressif ESP-hosted Wi-Fi driver affected versions not specified Description The driver parses frames received over SPI from the ESP co-processor in the esp hosted event task function. For control frames, the driver uses the 16-bit TLV field...

CVE-2026-89334

The Better Messages plugin for WordPress (chat rooms, group chat, private messages & AI chat bots) is vulnerable to authorization bypass in all versions up to and including 2.15.33 . The plugin fails to properly verify user authorization on the /thread/ REST endpoint , allowing any authenticated ...

CVE-2026-89334 Better Messages <= 2.15.33 - Missing Authorization to Authenticated (Custom+) Chat-Room Transcript Disclosure via '/thread/<id>' REST Endpoint

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.15.33. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it...

CVE-2026-89334 Better Messages <= 2.15.33 - Missing Authorization to Authenticated (Custom+) Chat-Room Transcript Disclosure via '/thread/<id>' REST Endpoint

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.15.33. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it...

CVE-2026-89334: Missing Authorization

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.15.33. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it...

PT-2026-95745

Name of the Vulnerable Software and Affected Versions Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots versions prior to 2.15.34 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions...

CVE-2026-85271 Open edX Platform: Stored CSS Injection in Email Digest Notifications via Unsanitized Thread Title (incomplete patch of CVE-2026-42857)

Open edX Platform enables the authoring and delivery of online learning at any scale. From Redwood until Ulmo and Verawood.1, the addadditionalattributestonotifications function in openedx/core/djangoapps/notifications/email/utils.py assigns notification content without sanitizing discussion-titl...

CVE-2026-91149 Cockpit: cockpit: denial of service via unbounded connection thread spawning

A flaw was found in Cockpit. An unauthenticated remote attacker can exploit this vulnerability by initiating and sustaining numerous simultaneous connections to the cockpit-tls service. This forces the service to create an unbounded number of detached threads, consuming system resources such as...

CVE-2026-91149 Cockpit: cockpit: denial of service via unbounded connection thread spawning

A flaw was found in Cockpit. An unauthenticated remote attacker can exploit this vulnerability by initiating and sustaining numerous simultaneous connections to the cockpit-tls service. This forces the service to create an unbounded number of detached threads, consuming system resources such as...

CVE-2026-91149

A flaw in Cockpit allows an unauthenticated remote attacker to trigger a denial of service by initiating and sustaining numerous simultaneous connections to the cockpit-tls service. The service creates an unbounded number of detached threads , exhausting system resources such as memory and file d...

CVE-2026-16515

CVE-2026-16515 affects the Zephyr RTOS IPv6 stack in net_icmpv6_send_error() (subsys/net/ip/icmpv6.c), which failed to implement two of the three RFC 4443 §2.4 suppression rules for ICMPv6 error replies. An unauthenticated attacker on the same link can trigger ICMPv6 reflection and amplification ...