CVE-2026-15952

Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager PCM600. This issue affects Protection and control IED manager PCM600: through 2.14...

Uncontrolled Resource Consumption

Apache Tomcat is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to improper resource management in the WebSocket chat example application, which allows an attacker to consume excessive server resources and potentially cause a denial-of-service condition...

Security Bulletin: IBM® Db2® could allow a authenticated attacker to cause a denial of service due to uncontrolled resource consumption (CVE-2026-17463)

Summary IBM® Db2® could allow a authenticated attacker to cause a denial of service due to uncontrolled resource consumption CVE-2026-17463 Vulnerability Details CVEID:CVE-2026-17463 DESCRIPTION: IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2...

CVE-2026-82936

mH-DEVELOPER smart home module is vulnerable to Denial of Service due to uncontrolled resource consumption. The Express bodyParser is configured with a 250 MB limit for JSON and URL-encoded request bodies. An authenticated attacker on the LAN can send large request bodies that exhausts buffers in...

CVE-2026-59563

Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target resource identifier, allowing an MCP client or agent to replay a token generated for one resource to affect another resource of the same type. This issue is fixed in version 0.7.2...

EUVD-2026-88248

Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager PCM600. This issue affects Protection and control IED manager PCM600: through 2.14...

CVE-2026-15952 Improper Permission Assignment in Scheduler Service

Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager PCM600. This issue affects Protection and control IED manager PCM600: through 2.14...

CVE-2026-15952

The ABB Protection and control IED manager (PCM600) is affected by an improper permission assignment vulnerability within the Scheduler Service . This flaw involves incorrect permissions for a critical resource, potentially impacting confidentiality, integrity, and availability. The issue specifi...

CVE-2026-59563 HMAC Confirmation Token Unbinding in zscaler-mcp-server

Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target resource identifier, allowing an MCP client or agent to replay a token generated for one resource to affect another resource of the same type. This issue is fixed in version 0.7.2...

CVE-2026-59563 HMAC Confirmation Token Unbinding in zscaler-mcp-server

Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target resource identifier, allowing an MCP client or agent to replay a token generated for one resource to affect another resource of the same type. This issue is fixed in version 0.7.2...

CVE-2026-59563

The Zscaler MCP Server versions 0.7.0 and 0.7.1 are vulnerable to a token replay issue. The root cause is that HMAC confirmation tokens are not bound to the target resource identifier. This allows an MCP client or agent to replay a token intended for one resource to impact another resource of the...

EUVD-2026-88244

Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target resource identifier, allowing an MCP client or agent to replay a token generated for one resource to affect another resource of the same type. This issue is fixed in version 0.7.2...

CVE-2026-92103

Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a malicious HTTP/2 server to make the client hold up to about 16 MiB per connection in frames it should reject, consuming client memory. Mint.HTTP2.Frame.decodenext/2 in lib/mint/http2/frame.ex compares ...

EUVD-2026-88234

mH-DEVELOPER smart home module is vulnerable to Denial of Service due to uncontrolled resource consumption. The Express bodyParser is configured with a 250 MB limit for JSON and URL-encoded request bodies. An authenticated attacker on the LAN can send large request bodies that exhausts buffers in...

CVE-2026-82936 Denial of Service in mH-DEVELOPER

mH-DEVELOPER smart home module is vulnerable to Denial of Service due to uncontrolled resource consumption. The Express bodyParser is configured with a 250 MB limit for JSON and URL-encoded request bodies. An authenticated attacker on the LAN can send large request bodies that exhausts buffers in...

CVE-2026-82936 Denial of Service in mH-DEVELOPER

mH-DEVELOPER smart home module is vulnerable to Denial of Service due to uncontrolled resource consumption. The Express bodyParser is configured with a 250 MB limit for JSON and URL-encoded request bodies. An authenticated attacker on the LAN can send large request bodies that exhausts buffers in...

CVE-2026-82936

The mH-DEVELOPER smart home module is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled resource consumption. The Express bodyParser is configured with a 250 MB limit for JSON and URL-encoded request bodies, allowing an attacker on the LAN to send large request bodies that exh...

CVE-2026-82294

A flaw was found in Elasticsearch. An authenticated remote attacker can exploit this vulnerability to trigger excessive resource allocation, leading to a Denial of Service DoS. By sending requests that consume disproportionate system resources, an attacker can exhaust system capacity and cause th...

CVE-2026-94399

A flaw was found in Elasticsearch. An authenticated remote attacker can exploit this vulnerability by submitting requests that trigger excessive resource allocation, leading to system exhaustion. This flaw can result in a Denial of Service DoS, rendering the service unresponsive to legitimate...

CVE-2026-94397

A flaw was found in Elasticsearch. An authenticated remote attacker can exploit an uncontrolled resource consumption issue by submitting requests that trigger excessive allocation of system resources. This can exhaust available capacity, resulting in a Denial of Service DoS where the service...