CVE-2026-78844

Summary javadelight delight-nashorn-sandbox 0.5.5 suffers from Uncontrolled Resource Consumption. The sandbox enforces maxCPUTime limits by statically injecting interruption checks into JavaScript loops, but the sandbox fails to disable dynamic code evaluation. An attacker can use these functions...

CVE-2026-36958

CVE-2026-36958: Denial of Service via Concurrent HTTP Requests CVE ID: CVE-2026-36958 Date: 2026-04-29 Discoverer: Kirubel Solomne Vendor: U-SPEED Product: U-SPEED Router Firmware Version: V1.0.0 CWE: CWE-400 - Uncontrolled Resource Consumption Description The U-SPEED Router firmware V1.0.0 is...

CVE-2026-116659

Tanium addressed an uncontrolled resource consumption vulnerability in Enforce...

CVE-2026-116656

Tanium addressed an uncontrolled resource consumption vulnerability in Enforce...

CVE-2026-108309

Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension...

CVE-2026-116659 Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.

Tanium addressed an uncontrolled resource consumption vulnerability in Enforce...

CVE-2026-116659

Tanium addressed an uncontrolled resource consumption vulnerability in the Enforce component. The root cause is identified as the allocation of resources without limits or throttling (CWE-770). This vulnerability could lead to a low availability impact on the system. No specific exploit informati...

CVE-2026-116656

Tanium addressed an uncontrolled resource consumption vulnerability in Enforce . The vulnerability, associated with CWE-400 , has a base severity of HIGH (CVSS 3.1 score of 7.5) because it can impact availability over a network. No specific technical details regarding the root cause, affected com...

EUVD-2026-111264

Tanium addressed an uncontrolled resource consumption vulnerability in Enforce...

EUVD-2026-111266

Tanium addressed an uncontrolled resource consumption vulnerability in Enforce...

CVE-2026-108309

Tanium addressed an uncontrolled resource consumption vulnerability in the Performance Client Extension component. The vulnerability is associated with CWE-770 (Allocation of Resources Without Limits or Throttling), which can lead to high availability impact . The base CVSS 3.1 score is 5.5, refl...

CVE-2026-108309 Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.

Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension...

EUVD-2026-111256

Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension...

CVE-2026-117505

A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Performing a manipulation results in resource consumption. The attack can be initiated remotely. Upgrading to version 1.3.0.Final is sufficie...

CVE-2026-117506

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

CVE-2026-117506 a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

CVE-2026-117506

A weakness in the Push Notification Config Store component of a2aproject a2a-java (versions up to 1.2.0.Final ) allows for remote resource consumption. The vulnerability exists within the InMemoryPushNotificationConfigStore.setInfo function of the JpaDatabasePushNotificationConfigStore.java file....

EUVD-2026-110929

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

CVE-2026-117505 a2aproject a2a-java ChildQueue queue.offer resource consumption

A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Performing a manipulation results in resource consumption. The attack can be initiated remotely. Upgrading to version 1.3.0.Final is sufficie...

CVE-2026-117505

A security flaw exists in a2aproject a2a-java up to version 1.2.0.Final . The vulnerability is located in the ChildQueue component, specifically within the queue.offer function. A remote attacker can perform a manipulation that leads to resource consumption , as categorized by CWE-400 (Uncontroll...