ROS-20260921-73-0078

The vulnerability is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow a perpetrator to cause service failures...

ROS-20260921-73-0121

The vulnerability in Xen is related to operations involving resources after their expiration. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260921-73-0022

The vulnerability in haproxy2 is related to a numerical overflow issue. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0095

The vulnerability is related to operations involving a resource after its expiration date. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0048

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0050

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0117

The vulnerability in Xen is related to the lack of use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

ROS-20260921-73-0028

The vulnerability in haproxy30 is related to a numerical overflow issue. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0097

The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0106

The vulnerability of the library for working with USB devices using libusb is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-94623: Reachable Assertion

vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix caching implementation that fails to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. Attackers can trigger an assertion failure in...

ROS-20260921-73-0135

The vulnerability in curl is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0101

The vulnerability in HProxy is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0103

The vulnerability in haproxy30 is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0102

The vulnerability in haproxy2 is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0065

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0052

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0042

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0040

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-79918: Protection Mechanism Failure

MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, the ToolExecutor LDPRELOAD sandbox hooks execve, execvpe, and execveat to prevent subprocess creation but does not hook fexecve. An authenticated attacker able to execute tool code can call fexecve to start a proces...