CVE-2026-72495

A flaw was found in the Linux kernel's RDMA/bnxtre component. A local attacker could exploit this vulnerability by repeatedly requesting Work Completion WC pages for the same user context ucontext, exceeding the supported limit of one page per context. This could lead to concurrent access issues...

CVE-2026-61690

Grav is a file-based Web platform. Prior to 2.0.1, Grav ZipArchiver::extract in system/src/Grav/Common/Filesystem/ZipArchiver.php passes archives to ZipArchive::extractTo without enforcing the system.gpm.archive uncompressed-size, file-count, or nesting-depth limits. Code using...

CVE-2026-16818

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-16690

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-16818

CVE-2026-16818 affects IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 , allowing a remote, unauthenticated attacker to cause a denial of service through uncontrolled resource consumption . The CVSS 3.1 score is 7.5 (HIGH) with a network attack vector requiring no privileges or user interaction. CIS...

CVE-2026-16818 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

EUVD-2026-62528

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-16690 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-16690

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 are vulnerable to uncontrolled resource consumption, allowing an unauthenticated remote attacker to cause denial of service (CVSS 7.5, HIGH). No exploit details are provided; IBM's support page is referenced for remediation guidance. Monitor for vendor patch...

EUVD-2026-62520

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...

MINI-G9J2-J22H-HMP4

Bulletin has no description...

CVE-2026-72434

A flaw was found in the Linux kernel's netfilter ipset component. When destroying a set, the garbage collection gc mechanism may not be properly stopped due to an unconditional call to queuedelayedwork while canceldelayedworksync is called. This improper shutdown can lead to resource exhaustion,...

CVE-2026-74376

A flaw was found in the Linux kernel's md/raid10 component. This vulnerability occurs when a specific internal data structure, used for disk operations, is reused for a discard operation without properly resetting a critical flag. This oversight can lead to improper release of system resources,...

CVE-2026-66257

A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit an issue with unbounded symbol value caching. This could lead to resource exhaustion, where the system runs out of available resources, ultimately causing a denial of service DoS. A denial ...

CVE-2026-74372

A flaw was found in the Linux kernel's RAID1 subsystem. When a REQATOMIC write operation encounters a bad block, a reference to the RAID device rdev is not properly released. This resource leak prevents the affected RAID device from being removed, potentially leading to a denial of service DoS...

CVE-2026-76042

A flaw was found in Google Chrome, specifically within its GPU component, where an uninitialized resource could be used. A remote attacker, after compromising the renderer process, could exploit this by crafting a malicious HTML page. This could allow the attacker to read memory outside of the...

CVE-2026-74427

A flaw was found in the AFS Andrew File System component of the Linux kernel. During the teardown of an AFS network namespace, a work item responsible for managing preallocated resources rxrpc call/connection/peer queue may not be properly canceled. This improper resource handling could lead to a...

BIT-KIBANA-2026-72674 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. A user-supplied list of document fields accepted by the Kibana Playground for RAG feature was neither bounded in length nor de-duplicated before it was used t...

BIT-KIBANA-2026-72667 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. A specially crafted request submitted by an authenticated user with minimal privileges to a validation capability of the Observability log analysis feature...