PT-2026-63265

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An authenticated attacker with low-privilege access can cause a denial of service by sending a specially crafted, oversized request payload. This triggers uncontrolled resource consumption...

CVE-2026-61093: Uncontrolled Resource Consumption

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple...

CVE-2026-61192: Uncontrolled Resource Consumption

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Install. The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Engineering...

CVE-2026-60410: Uncontrolled Resource Consumption

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise TimesTen...

CVE-2026-61194: Uncontrolled Resource Consumption

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Core. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Agile Engineering Data...

CVE-2026-56145: Uncontrolled Resource Consumption

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. A low-privileged authenticated user with permission to execute EQL sequence queries against an index they control can send a specially crafted query that triggers excessive...

CVE-2026-61109: Uncontrolled Resource Consumption

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: JSON. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged...

CVE-2026-60425: Uncontrolled Resource Consumption

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware component: OUD Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified...

The vulnerability of the SPDY framework for developing network applications, servers, and client protocols using Netty allows attackers to induce service failures.

The vulnerability of the SPDY framework for developing network applications, servers, and client protocols related to Netty is related to the uncontrolled distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

PT-2026-62093

Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Uncontrolled Resource Consumption allows a low-privileged authenticated user with permission to execute EQL sequence queries against an index they control to trigger excessive memory...

The vulnerability of the virtio_net_hdr_tnl_from_skb() function in the include/linux/virtio_net.h module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the virtionethdrtnlfromskb function in the include/linux/virtionet.h header of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-63261: Uncontrolled Resource Consumption

Uncontrolled Resource Consumption CWE-400 in Kibana can lead to denial of service via Excessive Allocation CAPEC-130. A low-privileged authenticated user can send a specially crafted request to a Kibana machine learning feature, causing the server to exhaust available memory and become unavailabl...

CVE-2026-47018: Uncontrolled Resource Consumption

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Siebel CRM Cloud...

CVE-2026-47021: Uncontrolled Resource Consumption

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.1...

PT-2026-67411

Name of the Vulnerable Software and Affected Versions Grav CMS version 2.0.10 Description A path traversal issue exists in the ImageMedium::watermark function, which passes an unsanitized $image argument to RocketThemeToolboxResourceLocatorUniformResourceLocator::findResource. The file:// scheme...

PT-2026-63266

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Uncontrolled Resource Consumption in Kibana can lead to a denial of service through excessive allocation. A low-privileged authenticated user can send a specially crafted request to a machine...

CVE-2026-60382: Uncontrolled Resource Consumption

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Service...

CVE-2026-55851: Uncontrolled Resource Consumption

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final up to but not including 4.2.16.Final, and 4.1.0.Final up to but not including 4.1.135, the HAProxyMessageDecoder in Netty's codec-haproxy module performs protocol version detection by...

ROS-20260721-73-0043

The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge relates to access to resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT-2026-63269

Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Uncontrolled Resource Consumption in the ES|QL engine can lead to a denial of service through Exponential Data Expansion, a technique where a small input causes a disproportionately lar...