EUVD-2026-59604

Allocation of resources without limits or throttling vulnerability in Apache Struts. When no fixed locale is configured, the locale used for localized-text lookups is taken from the incoming request, allowing an unauthenticated remote client to cause the framework's internal localized-text caches...

CVE-2026-73635

Apache Struts (versions 2.0.0–2.3.37, 2.5.0–2.5.33, 6.0.0–6.10.0, 7.0.0–7.2.1) is vulnerable to unbounded localized-text cache growth: when no fixed locale is set, the request-supplied locale causes caches to expand without limit, exhausting the Java heap and causing denial of service. CVSS 7.5 (...

MINI-P5GV-X9M4-X55Q

Bulletin has no description...

MINI-3JQ3-2PVH-HPRR

Bulletin has no description...

MINI-RPCV-PWM6-MWP8

Bulletin has no description...

MINI-7W3Q-W4XJ-P8XG

Bulletin has no description...

MINI-JC89-WM3P-M82H

Bulletin has no description...

MINI-36C4-626Q-7M69

Bulletin has no description...

MINI-WFP7-WQ69-V568

Bulletin has no description...

MINI-VF3F-RWQF-3G33

Bulletin has no description...

MINI-93WQ-XW76-HM62

Bulletin has no description...

MINI-G32J-RP5Q-W8VX

Bulletin has no description...

MINI-HF9M-G7JV-446X

Bulletin has no description...

MINI-RR9R-3MG3-5M4Q

Bulletin has no description...

MINI-2W3F-9PP5-JV2V

Bulletin has no description...

MINI-H3H9-4869-8GV2

Bulletin has no description...

MINI-MMRV-MX6H-6HXG

Bulletin has no description...

MINI-96HG-4P6Q-HPFG

Bulletin has no description...

MINI-5JJ3-5MVG-H68F

Bulletin has no description...

CVE-2026-74429

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the reception of a reply packet before data transmission Fix rxrpcreceivingreply to handle the reception of an apparent reply DATA packet before rxrpc has had a chance to send any request DATA packets on a client call ...