python-idna: idna: Denial of Service via specially crafted long inputs

A flaw was found in the idna library, which handles Internationalized Domain Names in Python applications. A remote attacker could exploit this vulnerability by sending specially crafted, excessively long inputs to the library's encoding function. This could cause the system to consume significan...

CVE-2026-14298 Boards archive import endpoint allows resource exhaustion via zip bomb and file size limit bypass in Mattermost

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit decompressed content size and enforce the configured maximum file size in the Boards archive import handler, which allows an authenticated user to cause memory exhaustion or unbounded disk...

CVE-2026-14298 Boards archive import endpoint allows resource exhaustion via zip bomb and file size limit bypass in Mattermost

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit decompressed content size and enforce the configured maximum file size in the Boards archive import handler, which allows an authenticated user to cause memory exhaustion or unbounded disk...

CVE-2026-14298

CVE-2026-14298 affects Mattermost releases: 11.9.x ≤ 11.9.0, 11.8.x ≤ 11.8.4, 11.7.x ≤ 11.7.7, and 10.11.x ≤ 10.11.22. An authenticated user can trigger denial of service by causing resource exhaustion while processing certain user-supplied input. The CVE has a base score of 6.5 (MEDIUM) under CV...

CVE-2026-14298 Boards archive import endpoint allows resource exhaustion via zip bomb and file size limit bypass in Mattermost

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit decompressed content size and enforce the configured maximum file size in the Boards archive import handler, which allows an authenticated user to cause memory exhaustion or unbounded disk...

python-idna: idna: Denial of Service via specially crafted long inputs

A flaw was found in the idna library, which handles Internationalized Domain Names in Python applications. A remote attacker could exploit this vulnerability by sending specially crafted, excessively long inputs to the library's encoding function. This could cause the system to consume significan...

EUVD-2026-57686

A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically with patch access to the Search Custom Resource CR, could exploit a vulnerability in the Collector.ImageOverride field. This allows the attacker to deploy an arbitrary container...

PT-2026-71693

Name of the Vulnerable Software and Affected Versions HTML::FormHandler versions prior to 0.40069 Description An issue exists where apply actions and add error use error message text constructed from request data as a Locale::Maketext bracket notation template. Because the default handle's lexico...

PT-2026-71695

Name of the Vulnerable Software and Affected Versions Form::Processor::Field::HtmlArea versions 0.06 through 1.162360 Description An issue exists where the validate function processes submitted markup using HTML::Tidy and passes the resulting messages to the add error function. These messages are...

Linux Distros Unpatched Vulnerability : CVE-2026-19517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows...

PT-2026-71765

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An authenticated user with read-only privileges to the alerting feature can cause a denial of service by submitting a specially crafted, malformed payload. This leads to excessive resource...

PT-2026-71787

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Kibana Fleet allows a user-supplied identifier for a Fleet Server host configuration to be accepted without rejecting relative traversal sequences. This identifier is stored and subsequently...

The vulnerability of the Linux operating system’s kernel Bluetooth module, allowing a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel Bluetooth module is related to premature resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s crypto kernel component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s crypto kernel component is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-19587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation. CVE-2026-19587 Note that Nessus relies on the presen...

OpenSSL 3.5.0 < 3.5.8 Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 3.5.8. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.5.8 advisory. - Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging...

The vulnerability of the scsi/qla2xxx/qla_gs.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the scsi/qla2xxx/qlags.c component of the Linux operating system is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2026-71662

Name of the Vulnerable Software and Affected Versions rsync versions 3.1.0 through 3.4.x Description A signed integer overflow exists in the I/O timeout implementation. An attacker can inject MSG IO TIMEOUT messages containing non-positive values zero or negative, causing the timeout variable to...

PT-2026-71607

Name of the Vulnerable Software and Affected Versions OpenSSL versions 3.5 and later Description An OpenSSL QUIC server can allocate and queue new incoming channels without enforcing a limit when processing valid QUIC Initial packets for unknown destination connection IDs. The system uses the...

PT-2026-71784

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Kibana is subject to a denial of service issue due to the allocation of resources without limits or throttling. In the Kibana Playground for the RAG Retrieval-Augmented Generation feature, a...