Lucene search
+L

6477 matches found

Tenable Nessus
Tenable Nessus
•added 2026/02/10 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-0398

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor. CVE-2026-0398 Note that Nessus relies on th...

5.3CVSS6AI score0.00345EPSS
SaveExploits0References3
PyPA
PyPA
•added 2026/02/09 8:15 p.m.•23 views

PYSEC-2026-2197

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS6AI score0.00566EPSS
SaveExploits1References4Affected Software1
osv_pysec
osv_pysec
•added 2026/02/09 8:15 p.m.•24 views

PYSEC-2026-2197

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS6AI score0.00566EPSS
SaveExploits1References4
NVD
NVD
•added 2026/02/09 8:15 p.m.•20 views

CVE-2026-25480

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS0.00566EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/02/09 6:49 p.m.•51 views

CVE-2026-25480 FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS0.00566EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/02/09 6:49 p.m.•12 views

CVE-2026-25480

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS6AI score0.00566EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2026/02/09 6:49 p.m.•93 views

CVE-2026-25480

Litestar prior to 2.20.0 uses FileStore cache keys derived from Unicode NFKD normalization and ord() substitution without separators, enabling cache key collisions when used as a response-cache backend. An unauthenticated remote attacker can craft paths to trigger collisions, causing one URL to s...

6.5CVSS6AI score0.00566EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/09 6:49 p.m.•10 views

CVE-2026-25480 FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS6AI score0.00566EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2026/02/09 6:49 p.m.•23 views

CVE-2026-25480 FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS5.7AI score
SaveExploits0References6
osv_ghsa
osv_ghsa
•added 2026/02/09 5:19 p.m.•24 views

GHSA-VXQX-RH46-Q2PG Litestar's FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Summary FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remote attacker can trigger cache key collisions via crafted paths, causing one UR...

6.5CVSS6.1AI score0.00566EPSS
SaveExploits1References6
NVD
NVD
•added 2026/02/09 3:16 p.m.•24 views

CVE-2026-0398

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS0.00345EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/02/09 3:16 p.m.•16 views

UBUNTU-CVE-2026-0398

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS6.1AI score0.00345EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2026/02/09 3:16 p.m.•21 views

UBUNTU-CVE-2025-59023

Crafted delegations or IP fragments can poison cached delegations in Recursor...

8.2CVSS5.8AI score0.00304EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/02/09 3:16 p.m.•16 views

CVE-2026-0398

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS6.1AI score0.00345EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/02/09 2:20 p.m.•15 views

CVE-2026-0398 Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS6.1AI score
SaveExploits0References5
AlpineLinux
AlpineLinux
•added 2026/02/09 2:20 p.m.•39 views

CVE-2026-0398

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS6.1AI score0.00345EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/02/09 2:20 p.m.•9 views

CVE-2026-0398 Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS6.1AI score0.00345EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/09 2:20 p.m.•62 views

CVE-2026-0398

PowerDNS Recursor is affected by CVE-2026-0398. The issue involves crafted DNS zones that can cause increased resource usage and crafted CNAME chains that can lead to cache poisoning in the Recursor. The available documents do not specify affected versions, exact root cause in code paths, or offi...

5.3CVSS6.1AI score0.00345EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/02/09 2:20 p.m.•64 views

CVE-2026-0398 Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS0.00345EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/09 2:20 p.m.•16 views

CVE-2026-0398

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS6.1AI score0.00345EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder