CVE-2026-47262 containerd image-triggered runtime DoS via unbounded group parsing

containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service DoS condition. When creating a container from this image, memory exhaustion occurs, leading to an...

The vulnerability of the authentication mechanism of the SAML-based NetScaler ADC controller (formerly Citrix ADC) and the NetScaler Gateway virtual environment access control system (formerly Citrix Gateway) allows a attacker to cause service interruptions.

The vulnerability of the SAML authentication mechanism for NetScaler ADC formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway is related to reading data beyond the allowed range in memory. Exploiting this vulnerability could allow a...

The vulnerability in the `io.netty.handler.codec.dns.DnsCodecUtil` component of the Netty framework, which is used for developing network applications, servers, and clients, allows a attacker to cause a service failure.

The vulnerability of the io.netty.handler.codec.dns.DnsCodecUtil component in the Netty framework, which is used for developing network applications, servers, and clients, relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious...

The vulnerability of the publickey_response_success() function in the libssh2 library allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the publickeyresponsesuccess function in the libssh2 library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code...

The vulnerability of the ngx_http_charset_module module in NGINX Plus and NGINX Open Source web servers allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the ngxhttpcharsetmodule module in NGINX Plus and NGINX Open Source web servers relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information or cause...

The vulnerability in the function lt9611_connector_init() of the module drivers/gpu/drm/bridge/lontium-lt961.c, a driver for the Direct Rendering Infrastructure (DRI) of the Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the lt9611connectorinit function in the drivers/gpu/drm/bridge/lontium-lt961.c driver for the Direct Rendering Infrastructure DRI component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the writeMasterPasswordInfo() method in the software for managing and publishing geodata on the OSGeo GeoServer server allows a perpetrator to execute arbitrary code, expose sensitive information, and cause service failure.

The vulnerability of the writeMasterPasswordInfo method in the software for managing and publishing geodata on the OSGeo GeoServer server is related to improper external management of file names or paths. Exploiting this vulnerability could allow an attacker to execute arbitrary code, disclose...

The vulnerability of the set_tagged_addr_ctrl() function in the arch/riscv/kernel/process.c module of the module management subsystem for the RISCV architecture-based Linux operating system allows a attacker to trigger a service failure.

The vulnerability of the settaggedaddrctrl function in the arch/riscv/kernel/process.c module of the module for managing modules on the RISCV architecture-based Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attack...

The vulnerability of the io_poll_remove() function in the io_uring/poll.c module of the Linux kernel’s asynchronous I/O interface allows a attacker to cause a service failure.

The vulnerability of the iopollremove function in the iouring/poll.c module of the Linux kernel’s asynchronous I/O interface relates to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the asdpciRemove() function in the drivers/scsi/aic94xx/aic94xx_init.c driver for Linux SCSI device drivers allows a hacker to cause a service failure.

The vulnerability of the asdpciRemove function in the drivers/scsi/aic94xx/aic94xxinit.c driver for Linux SCSI devices is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260626-73-0040

The vulnerability of the ngxquicmodule module in NGINX Plus and NGINX Open Source web servers relates to the bypassing of authentication processes through spoofing. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

ROS-20260626-73-0015

The vulnerability of the ASN.1 library Libtasn1 is related to writing outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

ROS-20260626-73-0028

The vulnerability in ImageMagick 7 is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability in the driver module/hid/hid-core.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/hid/hid-core.c module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the `ip6_err_gen_icmpv6_unreach()` function in the `net/ipv6/icmp.c` module of the Linux operating system allows a attacker to gain unauthorized access to protected information or cause service failures.

The vulnerability of the ip6errgenicmpv6unreach function in the net/ipv6/icmp.c module of the Linux operating system is related to access to resources through incompatible types. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause...

The vulnerability in the net/core/dev.c module of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the net/core/dev.ct module in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2026-52926

A flaw was found in the Linux kernel's batman-adv module, which is responsible for managing mesh networks. When a mesh network is being shut down, the system fails to properly clear the active gateway information. This leaves outdated network configuration data, which can prevent the mesh network...

PYSEC-2026-229

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote attackers can invoke the /monitor/actions/cleanup endpoint and manipulate monitoring state without authentication,...

CVE-2026-56262

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote attackers can invoke the /monitor/actions/cleanup endpoint and manipulate monitoring state without authentication,...

PYSEC-2026-229

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote attackers can invoke the /monitor/actions/cleanup endpoint and manipulate monitoring state without authentication,...