CVE-2026-94449: Uncontrolled Resource Consumption

A flaw was found in the SmallRye Fault Tolerance library, which is used by Quarkus to provide strategies like retries and circuit breakers for microservices. The issue occurs when using the ApplyGuard or ApplyFaultTolerance annotations, where the library fails to release internal tracking objects...

ROS-20260921-73-0127

The vulnerability in Golang is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260921-73-0046

The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0123

The vulnerability in Xen is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0038

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-49811: Incorrect Permission Assignment for Critical Resource

Dell Command | Monitor DCM, versions prior to 10.13.2, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

ROS-20260921-73-0083

The vulnerability is related to insecure resource initialization. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

PT-2026-97265

Affected versions of connectrpc start a background task to read the request body of every client-streaming and bidirectional-streaming call, before the interceptors or the handler run. A call can finish before it has consumed its request: the handler can return without reading all of its request...

Linux driver Heap Buffer Overflow DoS

The vulnerabilities of the functions cgxlmacwrite and cgxlmacread in the file drivers/net/ethernet/marvell/octeontx2/af/cgx.c of the network controller driver for the Marvell OcteonTX2 AF in the Linux operating system are related to insufficient resource management during its existence. Exploitin...

Linux kernel XFRM/IPsec DoS

The vulnerability of the functions copytouseraead, copytouserealg, and copytouserstateextra in the net/xfrm/xfrmuser.c sub-module of the XFRM/IPsec subsystem in Linux operating systems is related to insufficient control over resources with dynamic management. Exploitation of this vulnerability...

golang-x-image DoS

The vulnerability of the golang-x-image package, a programming language, is related to unlimited resource distribution. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

vm2 require.external Code Execution

The vulnerability of the require.external component in the vm2 package manager NPM is related to insufficient control over resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

vm2 EventEmitter Prototype Code Execution

The vulnerability of the EventEmitter.prototype.emit method in the vm2 library of the NPM package manager is related to insufficient resource control with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260921-73-0075

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260921-73-0027

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-96310

Name of the Vulnerable Software and Affected Versions lamp-cloud versions prior to 5.10.1 Description Authenticated users can read the roles and permissions of any employee because the application fails to validate the employeeId parameter in the '/anyone/visible/resource' endpoint. This allows...

CVE-2026-91867: Uncontrolled Resource Consumption

When Neethi fetches a remote policy reference, it only limits the time per read, not the whole transfer, so a server that trickles bytes slowly can keep the fetch alive indefinitely and tie up the calling thread denial of service. Users are recommended to upgrade to version 3.2.4, which fixes thi...

Cisco IOS XR Software Security Hardening Release: September 2026 (cisco-sa-hardening-iosxr-qg64NcM)

According to its self-reported version, Cisco IOS XR is affected by multiple vulnerabilities. - Multiple vulnerabilities in Cisco IOS XR Software due to improper resource control issues could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service conditio...

ROS-20260921-73-0033

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260921-73-0061

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...