CVE-2026-103223

A flaw was found in vertx-pg-client. A malicious, compromised, or intermediary database server can trigger a Denial of Service DoS condition by sending a message header containing an excessively large length value before authentication completes. Because the client does not properly validate the...

CVE-2026-103224

A flaw was found in vertx-mysql-client. This vulnerability allows a malicious or compromised MySQL server to cause a Denial of Service DoS by crashing the client application. Because the MySQL message decoder fails to enforce a cumulative size limit when reassembling multi-packet messages, a serv...

CVE-2026-102462

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the TDS message decoder in the Vert.x MSSQL client vertx-mssql-client aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or...

CVE-2026-103223

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send...

CVE-2026-103224

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle MySQL server can send...

EUVD-2026-101955

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle MySQL server can send...

CVE-2026-103224

The io.vertx:vertx-mysql-client component in Eclipse Vert.x versions [4.0.0, 4.5.34] , [5.0.0, 5.0.12] , [5.1.0, 5.1.9] , and [5.2.0, 5.2.0] is vulnerable to an out-of-memory crash . The root cause is that the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-...

CVE-2026-103224

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle MySQL server can send...

CVE-2026-103223

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send...

CVE-2026-102462

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the TDS message decoder in the Vert.x MSSQL client vertx-mssql-client aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or...

CVE-2026-102462

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the TDS message decoder in the Vert.x MSSQL client vertx-mssql-client aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or...

CVE-2026-103224: Undefined Security Weakness

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle MySQL server can send...

CVE-2026-102462: Uncontrolled Resource Consumption

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the TDS message decoder in the Vert.x MSSQL client vertx-mssql-client aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or...

PT-2026-114835

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle MySQL server can send...

EulerOS 2.0 SP15 : libsoup (EulerOS-SA-2026-3986)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soupmessageheadersappendcommon function in...

Rocky Linux 9.6 [TuxCare] Security Update: bsdcat / bsdcpio / bsdtar / libarchive / libarchive-devel (ALMALINUX9.6:CLSA-2026:1778894153)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778894153 advisory. - An issue was discovered in libarchive bsdtar before version 3.8.1 in function applysubstitution in file tar/subst.c when processing craft...

AlmaLinux 9.2 [TuxCare] Security Update: thunderbird Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1785839724)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785839724 advisory. - The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an...

Astra Linux – Vulnerability in Firefox

A maliciously crafted favicon could lead to a memory-out-of-control crash. This vulnerability affects Firefox versions earlier than 113...

Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba. Spaces used in a string surrounding a domain name can, when ignored, cause invalid DN strings to write a zero-byte into out-of-bounds memory, resulting in a crash. The greatest threat of this vulnerability is to system availability...

OESA-2026-3679 nmap security update

Nmap "Network Mapper" is a free and open source license utility for network discovery and security \ auditing. It was designed to rapidly scan large networks, but works fine against single hosts. Security Fixes: Nmap versions up to and including 7.99 contains a denial of service vulnerability tha...