RUSTSEC-2026-0435 Unbounded memory allocation in `thrift` binary protocol `read_bytes`

Affected versions of the thrift crate size a buffer directly from an attacker-controlled 4-byte length read off the wire, before reading any payload and with no upper bound, allowing a hostile peer to force a large eager allocation or an immediate abort denial of service, CWE-400 / CWE-789. This ...

Unbounded memory allocation in `thrift` binary protocol `read_bytes`

Affected versions of the thrift crate size a buffer directly from an attacker-controlled 4-byte length read off the wire, before reading any payload and with no upper bound, allowing a hostile peer to force a large eager allocation or an immediate abort denial of service, CWE-400 / CWE-789. This ...

Security Bulletin:Vulnerability in netty-codec-memcache may affect IBM Infosphere Change Data Capture (CVE-2026-93561)

Summary A security vulnerability has been identified in netty-codec-memcache, . netty-codec-memcache is used by IBM Infosphere Change Data Capture. IBM has addressed this vulnerability. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability Details...

CVE-2026-105942

When a configured proxy role sends a request to the broker on behalf of another user the original principal, the broker is designed to authorize both the proxy role and the original principal and to allow the request only if both are authorized, so that the original principal cannot exceed its ow...

CVE-2026-105942 Apache Pulsar: Original principal of proxied requests authorized with the proxy's authentication data, allowing privilege escalation

When a configured proxy role sends a request to the broker on behalf of another user the original principal, the broker is designed to authorize both the proxy role and the original principal and to allow the request only if both are authorized, so that the original principal cannot exceed its ow...

EUVD-2026-107477

When a configured proxy role sends a request to the broker on behalf of another user the original principal, the broker is designed to authorize both the proxy role and the original principal and to allow the request only if both are authorized, so that the original principal cannot exceed its ow...

CVE-2026-105942

When a configured proxy role sends a request to the broker on behalf of another user the original principal, the broker is designed to authorize both the proxy role and the original principal and to allow the request only if both are authorized, so that the original principal cannot exceed its ow...

CVE-2026-105942

This vulnerability affects Apache Pulsar versions from 2.8.1 before 4.0.14 and from 4.1.0 before 4.2.5. The issue stems from two flaws in how the broker authorizes proxied requests. First, the broker sometimes authorizes the original principal using the proxy's authentication data instead of its ...

CVE-2026-105942 Apache Pulsar: Original principal of proxied requests authorized with the proxy's authentication data, allowing privilege escalation

When a configured proxy role sends a request to the broker on behalf of another user the original principal, the broker is designed to authorize both the proxy role and the original principal and to allow the request only if both are authorized, so that the original principal cannot exceed its ow...

CVE-2026-105926 Apache Pulsar: Missing Topic Authorization on Binary Protocol GetSchema and GetOrCreateSchema Commands

The Pulsar broker serves two schema commands on its binary protocol: GetSchema, which returns the schema registered for a topic, and GetOrCreateSchema, which registers a new schema version for an existing topic. The broker handled both commands after checking only that the client connection was...

CVE-2026-105926 Apache Pulsar: Missing Topic Authorization on Binary Protocol GetSchema and GetOrCreateSchema Commands

The Pulsar broker serves two schema commands on its binary protocol: GetSchema, which returns the schema registered for a topic, and GetOrCreateSchema, which registers a new schema version for an existing topic. The broker handled both commands after checking only that the client connection was...

CVE-2026-105926

The Apache Pulsar broker is vulnerable to missing authorization checks on specific binary protocol commands. Specifically, the GetSchema and GetOrCreateSchema commands fail to verify if an authenticated client has permissions for the target topic, namespace, or tenant. An attacker could use these...

CVE-2026-105926

The Pulsar broker serves two schema commands on its binary protocol: GetSchema, which returns the schema registered for a topic, and GetOrCreateSchema, which registers a new schema version for an existing topic. The broker handled both commands after checking only that the client connection was...

PT-2026-120759

When a configured proxy role sends a request to the broker on behalf of another user the original principal, the broker is designed to authorize both the proxy role and the original principal and to allow the request only if both are authorized, so that the original principal cannot exceed its ow...

Use of Uninitialized Resource

Overview Affected versions of this package are vulnerable to Use of Uninitialized Resource via the GeoJSON Polygon and MultiPolygon encoding path in lib/cmd/encoder/binary-encoder.js when a ring element within the coordinates array is not a real array. The encoder sizes the output buffer using...

Linux Distros Unpatched Vulnerability : CVE-2026-93561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in io.netty/netty-codec-memcache. The Memcache binary protocol codec incorrectly reads keyLength and extrasLength as signed Java types instead ...

CVE-2026-93561

A flaw was found in io.netty/netty-codec-memcache. The Memcache binary protocol codec incorrectly reads "keyLength" and "extrasLength" as signed Java types instead of unsigned, as specified by the protocol. A malicious Memcache server can exploit this type mismatch by sending a specially crafted...

CVE-2026-93561: Undefined Security Weakness

A flaw was found in io.netty/netty-codec-memcache. The Memcache binary protocol codec incorrectly reads keyLength and extrasLength as signed Java types instead of unsigned, as specified by the protocol. A malicious Memcache server can exploit this type mismatch by sending a specially crafted...

CVE-2026-61515

Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command injection vulnerability that allows remote attackers to execute arbitrary operating system commands by sending a crafted JSON payload to the DebugShell interface exposed on TCP port 34567. Attackers can exploit...

PT-2026-67720

Name of the Vulnerable Software and Affected Versions Puwell IP Camera versions 2.x through 4.x Description An unauthenticated command injection issue exists in the binary protocol service. Remote attackers can execute arbitrary operating system commands with root-level privileges by sending a...