libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion

A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap...

libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly

A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation while the implementation still used th...

nginx: nginx: heap-based buffer overflow in ngx_http_core_module via alias with rewrite referencing $request_filename

A flaw was found in nginx. A remote, unauthenticated attacker can trigger a heap-based buffer overflow by sending crafted HTTP requests to a server configured with specific alias and rewrite directives that reference the request filename variable. Successful exploitation may allow an attacker to...

CVE-2026-76661

A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data...

CVE-2026-76660

A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data...

CVE-2026-76663 HPE NonStop TELSERV - Memory corruption vulnerability

A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS...

EUVD-2026-101815

A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS...

CVE-2026-76663 HPE NonStop TELSERV - Memory corruption vulnerability

A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS...

CVE-2026-76663

A stack-based buffer overflow vulnerability exists in HPE NonStop TELSERV (specifically version T9553L01^BAJ and earlier), which can lead to memory corruption and a potential Denial of Service (DoS) . HPE has released a fix for this vulnerability in version T9553L01^BAK and earlier versions (spec...

CVE-2026-76662 HPE NonStop TELSERV - Memory corruption vulnerability

A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS...

CVE-2026-76662

A buffer overflow vulnerability in HPE NonStop TELSERV can result in memory corruption and a Denial of Service (DoS) . Affected software includes TELSERV T9553 (versions T9553L01^BAJ and earlier). HPE has released fixes to address this vulnerability; users should refer to the provided documentati...

EUVD-2026-101814

A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS...

CVE-2026-76662 HPE NonStop TELSERV - Memory corruption vulnerability

A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS...

CVE-2026-76661 HPE NonStop QIOMON - Memory corruption vulnerability

A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data...

EUVD-2026-101812

A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data...

CVE-2026-76661

A vulnerability exists in HPE NonStop QIOMON (T8671) where an out-of-bounds write can occur, leading to the corruption of buffer data. This memory corruption flaw could potentially result in a Denial of Service (DoS) , buffer overflow, or stack overflow. HPE has released security fixes; specifica...

EUVD-2026-101811

A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data...

RHLW-2026-F7C61B4B79130A3C Lightwell Security Advisory: kafka-clients 3.6.2.rhlw-00004

Red Hat Lightwell has released org.apache.kafka:kafka-clients 3.6.2.rhlw-00004 with backported fixes for CVE-2024-31141, CVE-2025-27817, CVE-2026-33558, and CVE-2026-35554. CVE-2024-31141: Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider...

CVE-2026-0993

SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated remote attackers to cause a denial of service by sending an oversized boundary value in the Content-Type header of a crafted POST request. Attackers can exploit the embedded HTTP...

CLEANSTART-2026-FB92689 malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop

CVE-2026-39830 affects multiple packages. A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. See references for individual vulnerability details...