HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from information disclosure issues in the PAPI protocol, which may allow unauthenticated neighboring attackers to obtain partial information regarding how the affected services are handled, potentially leading to service outages...

Oracle MySQL Server permission and access control issue vulnerability

Versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1 of Oracle MySQL Server, as well as versions 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1 of Oracle MySQL Cluster, contain a permission and access control vulnerability...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Application Data Sets component. It may allow attackers with limited privileges to create, delete, or modify critical or accessible data via HTTP...

Oracle MySQL Server permission and access control issue vulnerability

Vulnerabilities related to permission and access control issues exist in Oracle MySQL Server versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1; as well as in Oracle MySQL Cluster versions 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 throu...

Oracle Outside In Technology security vulnerability

Oracle Outside In Technology version 8.5.8 contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow unauthenticated attackers to gain HTTP access, enabling them to create, delete, or modify critical data as well as all...

Sungrow iSolarCloud authorization issue vulnerability

Sungrow iSolarCloud versions prior to 2026 have an authorization issue vulnerability. This vulnerability stems from the logintype parameter being set to 5 in the login request, leading to authentication bypass and account takeover, which could potentially cause local power outages in Europe...

CISA: Communicating under Pressure: Best Practices for Service Providers

Developed by CISA, the Federal Bureau of Investigation, and international partners, this guidance describes how organizations can plan and execute clear, timely, accurate, and audience-appropriate communications during IT and operational technology OT outages. Whether caused by cyber threat actor...

GPU components DoS

The vulnerability of the GPU components in Google Chrome and Microsoft Edge relates to reading data from buffer areas beyond their acceptable limits. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline

A coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems on July 26 and 27, triggering a statewide cybersecurity response. Braham, Plymouth, South St. Paul and Maple Plain have publicly described a plant outage, communications failures or affecte...

ROS-20260728-73-0009

The vulnerability of the HTTP/2 header processing module in the Apache HTTP Server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260722-73-0030

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to external control over a web parameter that is assumed to be immutable. Exploiting this vulnerability could allow an attacker to cause service interruptions...

CVE-2026-63144

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user with read-level index access can submit a request that triggers unbounded recursive processing within the Elasticsearch que...

Microsoft .NET DoS

The vulnerability of the Microsoft .NET and Microsoft .NET Framework software platforms is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20260713-73-0030

The vulnerability in Python-Relenv is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Siemens Network Software Pointer Swapping DoS

The vulnerability of Siemens network software is related to the swapping of pointers. Exploiting this vulnerability can allow a perpetrator to cause service interruptions...

ROS-20260708-73-0026

The vulnerability of the Grafana Live messaging system in real-time mode, a platform for monitoring and surveillance, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially crafted...

Picomatch Path Traversal DoS

The vulnerability of the library for filtering file paths in Picomatch is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker operating remotely to cause service interruptions...

Suricata Uncontrolled Reachable Assertion DoS

The vulnerability of the Suricata intrusion detection and prevention system is related to an uncontrolled, exploitable flaw. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

Cisco ASA FTD Service Outage

The vulnerability of the Remote Access SSL VPN microprogramming network interface layer software developed by Cisco Adaptive Security Appliance ASA and Cisco Secure Firewall Threat Defense FTD is related to unlimited distribution of resources. Exploiting this vulnerability could allow a malicious...

Oracle Identity Manager Connector DoS

The vulnerability of the Core component of the Oracle Identity Manager Connector, a software solution for managing user accounts and access rights, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...