SUSE CVE-2026-98088

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid out-of-bounds cpumaskofnode call in baseassignreplyqueues devtonode can return NUMANONODE -1 on systems without NUMA topology information for the PCI device, such as single-socket boards that don't expose...

PT-2026-104240

Zebra zebrad 5.0.0 before 6.0.0-rc.0 does not apply its per-peer mempool admission cap to transactions received as direct P2P tx messages, because these are queued without the sending peer recorded as their source. A remote inbound peer can push many unique transactions to occupy a disproportiona...

RabbitMQ 4.0.x < 4.0.22 / 4.1.x < 4.1.14 / 4.2.x < 4.2.7 Atom Exhaustion via User Tags List

The version of RabbitMQ installed on the remote host is 4.0.x prior to 4.0.22, or 4.1.x prior to 4.1.14, or 4.2.x prior to 4.2.7. It is, therefore, affected by a denial of service vulnerability: - settags/2 maps rabbitdatacoercion:toatom/1 over the user's tags list, and the 20 MB management reque...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : libXpm vulnerability (USN-8862-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8862-1 advisory. It was discovered that libXpm did not correctly handle XPM images with zero-dimension values. A local attacker could possibly use this iss...

PT-2026-104167

Memory allocation with excessive size value vulnerability in Apache Directory LDAP API. A malicious peer or a MITM can send a small BER-encoded response causing a large memory allocation before any data is received. This can lead to an OutOfMemoryError and denial of service. The client JVM OOMs...

ROS-20261002-73-0042

The vulnerability of the PostgreSQL database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...

PT-2026-104285

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Language bindings for Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin, and D fail to cap size fields during deserialization. This allows a remote client to send an excessively large...

CVE-2026-85005: Missing Authorization

The Popup Maker WP WordPress plugin through 1.4.5 does not perform authorization checks on several of its actions and exposes its management page to any logged-in user, allowing users with a low-privileged role such as Subscriber to store display-targeting values that are later invoked as...

CVE-2026-104845: Allocation of Resources Without Limits or Throttling

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.6.3, deserializeTypedArray in fromJSON and fromCrossJSON trusts a deserialized source value as an ArrayBuffer and does not bound the serialized element count. An attacker can...

PT-2026-104239

Name of the Vulnerable Software and Affected Versions zebra-rpc versions prior to 11.0.0 Description The getblock RPC method in the Zebra node panics when verbosity is set to 2 for a side-chain block. This occurs because the block's -1 confirmations sentinel is converted to a u32 type using the...

PT-2026-104187

Name of the Vulnerable Software and Affected Versions Apache Directory LDAP API versions 2.1.0 through 2.1.8 Description An asymmetric resource consumption issue exists where storing a password using the bcrypt algorithm with an excessively high cost factor, such as 30, can cause the server CPU t...

CVE-2026-95512

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...

CVE-2026-104427: Incomplete Cleanup

Zebra before 6.1.0 contains an incomplete cleanup vulnerability in the state write task that allows remote unauthenticated peers to stall node synchronization by poisoning parenterrormap. Attackers can deliver a coinbase-malleated block sharing a canonical block's hash before it propagates, causi...

ROS-20261002-73-0094

The vulnerability of the ECPG client of the PostgreSQL database management system is related to a countable loss of significance. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending an incorrect bytea value...

CVE-2026-104435: Improper Verification of Cryptographic Signature

Zebra zebrad 4.4.0 and zebra-script 6.0.0 fail to enforce a ZIP-244 consensus rule, accepting V5 transparent inputs signed with SIGHASHSINGLE that lack a corresponding output. Attackers can broadcast crafted V5 transactions with more inputs than outputs that Zebra accepts but zcashd rejects,...

CVE-2026-103880: Asymmetric Resource Consumption (Amplification)

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algorithm with a high force like 30 in a LDAP server that supports this algorithm will cause the server CPU to run for hours checking the credentials. A bounded cost should be enforced...

CVE-2026-102731: Memory Allocation with Excessive Size Value

Memory allocation with excessive size value vulnerability in Apache Directory LDAP API. A malicious peer or a MITM can send a small BER-encoded response causing a large memory allocation before any data is received. This can lead to an OutOfMemoryError and denial of service. The client JVM OOMs...

PT-2026-104237

Zebra before 6.1.0 contains an inefficient algorithmic complexity vulnerability in remaining transaction value that clones the entire block-level spent-UTXO map per transaction during contextual verification. Attackers can mine or seed the mempool with roughly 26,000 minimal single-input...

PT-2026-105530

Impact geopy.Point and Point.from string may take excessive CPU time when parsing long, malformed coordinate strings due to inefficient regular-expression behavior. The numeric Point constructor is not affected. Geocoders' reverse methods called with string inputs exercise the vulnerable path...

CVE-2026-83663: Uncontrolled Recursion

Uncontrolled Recursion vulnerability in Apache Thrift go bindings. Both Go transports satisfy a read out of a buffered frame and, when that frame yields no payload bytes, read the next frame and call Read again instead of looping. A peer produces such a frame for 4 bytes in TFramedTransport...