CVE-2026-85718 AsyncHttpClient: Connection permit leak on TLS handshake failure causes per-host denial of service

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 3.0.8 until 3.0.12, a client with maxConnections or maxConnectionsPerHost set above zero leaks one connection permit whenever TLS connection establishment fails...

EUVD-2026-81908

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 3.0.8 until 3.0.12, a client with maxConnections or maxConnectionsPerHost set above zero leaks one connection permit whenever TLS connection establishment fails...

Protection Mechanism Failure

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Protection Mechanism Failure in the node:sqlite module exposure within the sandbox environment when certain builtins are permitted. An attacker can...

Protection Mechanism Failure

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Protection Mechanism Failure in the Promise.prototype.finally process. An attacker can execute arbitrary code by crafting an async function that...

Protection Mechanism Failure

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Protection Mechanism Failure via the WebAssembly.compileStreaming and WebAssembly.instantiateStreaming functions. An attacker can gain access to the...

Protection Mechanism Failure

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Protection Mechanism Failure through improper enforcement of the allowAsync option in the VM and NodeVM. An attacker can execute code asynchronously...

Protection Mechanism Failure

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Protection Mechanism Failure through the handleException process. An attacker can execute arbitrary code and disclose process information by exploiti...

BIT-MONGODB-2026-82064 Unauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set Members

A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion's assumptions about...

BIT-MONGODB-2026-82059 Improper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of Service

An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges...

PT-2026-94589

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IOMMU VT-d component where the intel pasid setup sm context function fails to properly tear down scalable-mode context entries during a probe failure. When pci for...

PT-2026-94812

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the int3400 thermal driver where the evaluate odvp function creates per-ODVP sysfs files before the thermal zone and other probe resources are registered. Because the...

ROS-20260917-73-0031

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260917-73-0020

The vulnerability in the kernel-lt is related to the use of a name with an incorrect reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260917-73-0001

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-94873

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dax/fsdev component where the fsdev dax probe function sets pgmap-ops to &fsdev pagemap ops and pgmap-owner to dev dax without providing a mechanism to clear them...

ROS-20260917-73-0006

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260917-73-0029

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260917-73-0011

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-94529

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the ublk shmem remove ranges function where a teardown retry loop can occur due to an xarray allocation failure. The function attempts to store ranges into a temporary...

ROS-20260917-73-0022

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...