CVE-2026-16599 Denial of Service in GNU wget

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

CVE-2026-16599

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

CVE-2026-78678

GitPython versions before 3.1.59 contain an incomplete denylist in the unsafegitrevisionoptions guard that omits --contents and -S options, allowing attackers to read arbitrary files by passing these options to Repo.blame. Attackers can supply revision values like --contents=/etc/passwd to leak...

CVE-2026-66766

SAP S/4HANA Private Cloud uses a third-party component that contains a Regular Expression Denial of Service ReDoS vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could...

CVE-2026-66766 Denial of Service (DoS) in SAP S/4HANA (Manage Supply Protection)

SAP S/4HANA Private Cloud uses a third-party component that contains a Regular Expression Denial of Service ReDoS vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could...

EUVD-2026-65191

SAP S/4HANA Private Cloud uses a third-party component that contains a Regular Expression Denial of Service ReDoS vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could...

CVE-2026-66766 Denial of Service (DoS) in SAP S/4HANA (Manage Supply Protection)

SAP S/4HANA Private Cloud uses a third-party component that contains a Regular Expression Denial of Service ReDoS vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could...

CVE-2026-66766

SAP S/4HANA (Private Cloud) is affected by a Regular Expression Denial of Service (ReDoS) vulnerability in a third-party component within the Manage Supply Protection functionality. An unauthenticated attacker can supply specially crafted input that triggers excessive regex processing, exhausting...

PT-2026-81119

Name of the Vulnerable Software and Affected Versions SAP S/4HANA Private Cloud affected versions not specified Description SAP S/4HANA Private Cloud utilizes a third-party component susceptible to a Regular Expression Denial of Service ReDoS, a condition where a specially crafted input causes th...

CVE-2026-16599: Unchecked Input for Loop Condition

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

CVE-2026-66766: Inefficient Regular Expression Complexity

SAP S/4HANA Private Cloud uses a third-party component that contains a Regular Expression Denial of Service ReDoS vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ext4: Fix for timer use-after-free upon failed mount Syzbot has identified an ODEBUG bug in ext4fillsuper. The deltimersync function cancels the serrreport timer, which reminds of filesystem errors daily. We must ensure that the...

Astra Linux – Vulnerability in Thunderbird

The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time. If this information is present, Thunderbird does not compare the signature creation date with the message date and time, and displays a valid signature even if there is a mismatch...

EUVD-2026-64604

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub41AD7C of the file /cgi-bin/mbox-config?method=SET&section=ntptimezone of the component Web Management. The manipulation of the argument timestr/ntpclientenabled results in stack-based buffer overflow. I...

CVE-2026-78050

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub41AD7C of the file /cgi-bin/mbox-config?method=SET&section=ntptimezone of the component Web Management. The manipulation of the argument timestr/ntpclientenabled results in stack-based buffer overflow. I...

CVE-2026-78050: Stack-based Buffer Overflow

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub41AD7C of the file /cgi-bin/mbox-config?method=SET&section=ntptimezone of the component Web Management. The manipulation of the argument timestr/ntpclientenabled results in stack-based buffer overflow. I...

CVE-2026-78050 Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflow

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub41AD7C of the file /cgi-bin/mbox-config?method=SET&section=ntptimezone of the component Web Management. The manipulation of the argument timestr/ntpclientenabled results in stack-based buffer overflow. I...

CVE-2026-78050 Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflow

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub41AD7C of the file /cgi-bin/mbox-config?method=SET&section=ntptimezone of the component Web Management. The manipulation of the argument timestr/ntpclientenabled results in stack-based buffer overflow. I...

CVE-2026-78050

CVE-2026-78050 is a stack-based buffer overflow in the Web Management component of Comfast CF-N1-S firmware 2.6.0.1 . The vulnerable function sub_41AD7C is reachable via the CGI endpoint /cgi-bin/mbox-config?method=SET&section=ntp_timezone. Manipulating the timestr or ntp_client_enabled argument ...

PT-2026-79742

Name of the Vulnerable Software and Affected Versions Comfast CF-N1-S version 2.6.0.1 Description A stack-based buffer overflow exists in the Web Management component. The issue occurs when the device processes input for NTP timezone settings via the /cgi-bin/mbox-config?method=SET&section=ntp...