PT-2026-120659

Name of the Vulnerable Software and Affected Versions Lagoon versions prior to 2.33.2 Description A flaw in the ssh service within Lagoon core allows an attacker with a valid Lagoon user account to execute arbitrary code, potentially resulting in elevated administrative permissions. Detection of...

PT-2026-120557

Enforceable assertion in the streaming feature of Apache bRPC version 0 and unconditionally asserts CHECKbuf.IsEmpty on the frame payload. A feedback frame that carries an unexpected payload, or a feedback frame received on a stream where flow control is disabled cur buf size == 0, reaches these...

CVE-2025-71438

An out-of-bounds read in gfodfac4cfgdsiv1 /odf/descriptors.c in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...

PT-2026-120690

Name of the Vulnerable Software and Affected Versions Cisco products affected versions not specified Description A flaw in the Snort 3 Detection Engine allows an unauthenticated remote attacker to cause a denial of service DoS condition. The issue occurs during the processing of General Packet...

CVE-2025-60478

The GPAC Project/MP4Box software (versions before 2.5 ) is vulnerable to a use-after-free flaw located in the gf_filter_packet_destroy function within /filter_core/filter_pck.c. An attacker can exploit this vulnerability by supplying a crafted MPEG-2 file to cause a Denial of Service (DoS) . Whil...

ROS-20261021-73-0015

The vulnerability in freerdp3 is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Cisco FTD: CVE-2026-20019: Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities

Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error...

Cisco FTD: CVE-2026-20011: Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of error checking when the MIME fields of the SMTP header are parsed...

Red Hat: CVE-2026-92824: libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts

A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count of digest algorithms as its bound instead of the number of checksums in the current digest table. Crafted modulemd v2 metadata with multiple digest types can trigger an...

Red Hat: CVE-2026-92823: libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed YAML

A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML is decompressed through a custom read handler that does not enforce a cumulative decompressed-size limit before parsing. An attacker who can supply a highly compressible compressed YAML file can cause...

Red Hat: CVE-2026-92822: libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd YAML

A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values through recursive YAML mapping and sequence helpers without a recursion-depth or node-count limit. An attacker who can supply crafted modulemd YAML with deeply nested xmd content...

Red Hat: CVE-2026-114038: device-mapper-multipath: device-mapper-multipath: Information disclosure via malformed format string

A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure...

CVE-2020-37288: Always-Incorrect Control Flow Implementation

Vyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for loop in an internal function called two or more internal calls deep, producing an invalid jump destination stack underflow. Affected contracts revert such calls unnecessarily, which in limited...

Cisco IOS-XR: CVE-2026-76505: Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability

A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9902 and 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause network...

Cisco FTD: CVE-2026-76489: Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities

Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to...

Cisco TelePresence Video Communication Server (VCS) Expressway: CVE-2026-76466: Cisco Expressway Series Remote Code Execution Vulnerability

A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands as root. This vulnerability is due to the use of persistent cookies...

Cisco FTD: CVE-2026-76445: Multiple Cisco Products Snort 3 Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service DoS condition. The vulnerability is due to a flaw in logic handling...

Cisco FTD: CVE-2026-20221: Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation GRE tunnel decapsulation feature of the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause an unexpected restart of the Snort 3 Detection Engine. This vulnerability is...

Cisco FTD: CVE-2026-20218: Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability

A vulnerability in the Snort 3 Visual Basic for Applications VBA Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due...

Cisco FTD: CVE-2026-20197: Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities

Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error...