CVE-2026-109228: Allocation of Resources Without Limits or Throttling

SGLang through 0.5.21 contains a resource budget bypass vulnerability that allows remote attackers to override GLM-V video processing limits by supplying fps, maxframes, maxtokensperframe and maximagetokens in the videourl object. Attackers can set these values arbitrarily high so glm4v.py decode...

CVE-2026-109299: Uncontrolled Resource Consumption

Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users with automations permission to stall the instance by submitting unsatisfiable recurrence rules. Attackers can repeatedly send rules like February 30th to the automations create or update...

CVE-2026-109351: Allocation of Resources Without Limits or Throttling

Gitoxide gix-pack before 0.75.0 contains an uncontrolled memory allocation vulnerability that allows remote attackers to abort the process by supplying a huge pack-header object count. Malicious remotes can serve a 12-byte pack header claiming 0xFFFFFFFF objects, forcing Tree::withcapacity to...

CVE-2026-109349: Reachable Assertion

gitoxide gix-pack before 0.75.0 contains a reachable assertion in BytesToEntriesIter::newfromheader: the pack header decoder accepts version 3, but a release-enabled asserteq! requires version 2. A malicious remote can send a 12-byte pack header declaring version 3 to panic the client and abort t...

Important: expat

Issue Overview: Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an ON^2 linear scan of elementType-defaultAtts to determin...

PT-2026-110677

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-57 ImageMagick versions prior to 7.1.2-32 Description A memory leak exists in the PNG encoder that occurs when libpng initialization fails, preventing the release of allocated memory. An attacker can cause ...

CVE-2026-78673: Improper Input Validation

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation...

Important: tomcat-native

Issue Overview: Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier, unsupported versions may also be...

CVE-2026-109205: Allocation of Resources Without Limits or Throttling

LogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that allows remote attackers to write files to disk without a session. Attackers can repeatedly send multipart requests with unlimited file parts to /upload, persisting files in...

PT-2026-121733

Heap buffer overflow in ntfs acl owner Heap buffer overflow in ntfs same sid Denial-of-service in ntfs inode attach all extents Heap buffer overflow in ntfs check restart area Heap buffer overflow in ntfs ea check wsldev Heap buffer overflow in ntfs external attr find Heap data corruption in ntfs...

PT-2026-110986

Name of the Vulnerable Software and Affected Versions odhcpd versions prior to commit cfddd56 Description An unauthenticated host on the same link can disrupt the DHCPv6 service by sending a crafted RENEW request containing multiple IA NA options after obtaining two bindings. This process trigger...

CVE-2026-109365: Insufficient Verification of Data Authenticity

Zebra before 6.4.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated peers to force full proof verification by serving forged block bodies with valid header hashes. Attackers can flip authorizing-only bytes such as a coinbase scriptSig, wasting Sapling,...

CVE-2026-75095: Uncontrolled Resource Consumption

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

PT-2026-110674

FreeRDP before 3.32.0 contains a double-free vulnerability in nsc context initialize encode that leaves dangling plane pointers after a partial buffer growth failure. Attackers using a crafted RDP client can negotiate NSCodec with a large desktop geometry to trigger allocation failure, crashing t...

PT-2026-110597

Name of the Vulnerable Software and Affected Versions SGLang versions prior to 0.5.22 Description A resource budget bypass allows remote attackers to override GLM-V video processing limits. By providing specific values in the video url object, attackers can manipulate the fps, max frames, max...

ALSA-2026:80798 Moderate: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc: Fi...

PT-2026-111097

Name of the Vulnerable Software and Affected Versions IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 Description A remote attacker can cause a denial of service by triggering uncontrolled resource consumption. Recommendations At the moment, there is no information about a newer versio...

PT-2026-110955

🚨 CVE-2026-96261 IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boo...

PT-2026-110991

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process...

PT-2026-110669

FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows malicious servers to crash clients via truncated KERB RPC INTERNAL NAME data. Attackers can send a CreateApReqAuthenticatorReq with NameCount of two or more ending before the...