CVE-2026-54873

Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for...

CVE-2026-54873

A flaw in OpenSSL allows a remote attacker to cause a Denial of Service (DoS) by sending specially crafted network packets to a QUIC protocol endpoint. The vulnerability occurs because the QUIC stack retains memory in packet buffers until the receiving application copies the stream data, a design...

CVE-2026-97602

A flaw was found in the Linux kernel. During network namespace cleanup, incomplete packet fragmentation queues are flushed without properly updating their completion state. A local attacker with access to unprivileged network namespaces can exploit this race condition during IPv6 packet reassembl...

CVE-2026-96422

A flaw was found in Wireshark. This vulnerability allows an attacker to cause a Denial of Service DoS by injecting crafted network packets or convincing a user to open a malicious packet capture file. An assertion failure within the Frame protocol metadissector triggers an unexpected application...

CVE-2026-96416

A flaw was found in Wireshark. An attacker could exploit this vulnerability by convincing a user to open a specially crafted packet capture file or by injecting malformed IEEE 802.11 wireless network traffic. Processing these invalid packets causes an application crash in the protocol dissector,...

CVE-2026-97570

A flaw was found in the Broadcom NetXtreme-E bnxten driver in the Linux kernel. Due to improper bounds checking when mapping firmware Transparent Packet Aggregation TPA identifiers, software aggregation IDs can exceed the allocated memory for receive structures. During packet reception, this issu...

CVE-2026-97569

A flaw was found in the Linux kernel's Broadcom NetXtreme-E bnxten network driver. An attacker can cause a Denial of Service DoS by sending a burst of network traffic followed by a large UDP Segmentation Offload USO packet. When operating with small transmit ring configurations, the driver...

CVE-2026-98062

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. The kernel incorrectly treats certain signal tracepoint arguments as trusted memory pointers, even when special non-pointer indicator values are passed during signal delivery. A local user with privileges to attach BPF...

PT-2026-102764

Name of the Vulnerable Software and Affected Versions NetX RTSP Server affected versions not specified Description An unauthenticated client can cause a denial of service by draining the RTSP server's packet pool. This occurs when requests are sent containing a Session header that the parser cann...

CVE-2026-102715: Out-of-bounds Write

Any host on the LAN can send two mDNS records and make the responder write past the end of its transmit packet. The string table stores each name in a slot rounded up to a multiple of four: c / addons/mdns/nxdmdns.c:11436, 11443, 11447 / memorylen = memorylen & 0xFFFFFFFC + 8 & 0xFFFFFFFF; ... le...

CVE-2026-102721: Out-of-bounds Read

A TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram. Each receive path checks only that the datagram is at least four bytes long nxdtftpclient.c:1229, 1521, 1984. When the opcode is NXTFTPCODEERROR the message string is copied with ...

PT-2026-102949

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description A stack-based buffer overflow occurs in the DHCP fingerprinting daemon fingerd. An unauthenticated attacker with adjacent network access can execute arbitrary code or cause the...

PT-2026-102761

Name of the Vulnerable Software and Affected Versions NetX Duo TFTP server affected versions not specified Description The TFTP server fails to validate the upper bound of DATA datagram sizes, ignoring the protocol maximum of 4 + NX TFTP FILE TRANSFER MAX. This lack of validation leads to two...

PT-2026-109030

Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for...

PT-2026-102651

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description The QUIC process may retain memory for packet buffers longer than necessary. A remote peer can exploit this by sending maliciously crafted packets, forcing the local QUIC stack to keep packet...

PT-2026-102953

Name of the Vulnerable Software and Affected Versions Fireware OS affected versions not specified Description A NULL pointer dereference in the NetFlow packet-processing feature allows a remote, unauthenticated attacker to trigger a denial of service by sending a specially crafted IPv6 packet. A...

CVE-2026-102716: Missing Release of Memory after Effective Lifetime

An unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests that carry a Session header the parser cannot convert. The Session branch returns the raw NetX error code instead of an RTSP status code: c / addons/rtsp/nxrtspserver.c:2754 / status =...

PT-2026-102772

Name of the Vulnerable Software and Affected Versions NetX Secure affected versions not specified Description When built with NX SECURE KEY CLEAR, the software wipes every TLS record sent on an active session after it is handed to TCP. Because the TCP layer may have already released the packet...

PT-2026-102763

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A heap-buffer-overflow occurs when a host on the local area network sends two mDNS records with owner names whose lengths fall into the same rounded slot size...

Linux Distros Unpatched Vulnerability : CVE-2026-54873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this...