EUVD-2026-72111

wger before 2.5 fails to validate the maximum duration of routine date ranges, allowing authenticated users to create routines spanning arbitrarily long periods. Attackers can trigger the datesequence computation via routine detail endpoints, forcing the server to iterate thousands of times per...

CVE-2026-80862

This Linux kernel vulnerability affects the nvme-tcp subsystem. The page_frag_cache is used to preallocate PDU buffers for preallocated block device requests, but since block devices are created in parallel threads, the cache is accessed in a thread-unsafe manner. This leads to incorrect refcount...

CVE-2026-80862 nvme-tcp: fix usage of page_frag_cache

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix usage of pagefragcache nvme uses pagefragcache to preallocate PDU for each preallocated request of block device. Block devices are created in parallel threads, consequently pagefragcache is used in not thread-safe...

CVE-2026-85062

A flaw was found in Colord, a tool for color manipulations. A remote attacker can supply a specially crafted, oversized color string to the affected component. This can cause the processing thread to block, leading to a denial of service DoS for the application using Colord. Mitigation Mitigation...

EUVD-2026-70784

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limits. Attackers can open many connections and send endless header data to exhaust server threads and memory, causing service unavailability...

EUVD-2026-70777

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop where the accept thread performs a blocking receive without timeout during the wire-protocol handshake. An attacker can open a TCP connection to the MOOSDB port and send no data, causing the...

Linux Distros Unpatched Vulnerability : CVE-2026-80862

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-tcp: fix usage of pagefragcache nvme uses pagefragcache to preallocate PDU for each preallocated request of block device. Block devices are created in...

CVE-2026-85450

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limits. Attackers can open many connections and send endless header data to exhaust server threads and memory, causing service unavailability...

CVE-2026-85443 MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of Service

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop where the accept thread performs a blocking receive without timeout during the wire-protocol handshake. An attacker can open a TCP connection to the MOOSDB port and send no data, causing the...

CVE-2026-85443

MOOS core-moos through 10.4.0 has a denial of service vulnerability in MOOSCommServer::ListenLoop(). The accept thread performs a blocking receive without timeout during the wire-protocol handshake. An unauthenticated network attacker can open a TCP connection to the MOOSDB port and send no data,...

CVE-2026-85062

Colord is a tiny yet powerful tool for high-performance color manipulations and conversions. Prior to 2.9.4, synchronous CSS color string matchers in src/colorModels/rgbString.ts, src/colorModels/hslString.ts, src/colorModels/hwbString.ts, src/colorModels/lchString.ts, and...

PT-2026-85292

Name of the Vulnerable Software and Affected Versions core-moos versions prior to 10.4.1 Description A denial of service issue exists in the MOOSCommServer::ListenLoop function. The accept thread performs a blocking receive without a timeout during the wire-protocol handshake. An attacker can...

PT-2026-85299

Name of the Vulnerable Software and Affected Versions MOOS core-moos versions prior to 10.4.1 Description The MOOSDB HTTP server is subject to a denial of service issue where it creates unbounded connections and threads without limits. An attacker can exhaust server threads and memory by opening...

CVE-2026-40017

A flaw was found in Dovecot. A remote attacker who can send mail to a user can craft a message header designed to cause collisions in an internal hash table. This manipulation forces the IMAP THREAD command to consume excessive CPU resources, leading to degradation or a complete denial of service...

CVE-2026-40014

A flaw was found in Dovecot. A remote attacker, by sending a specially crafted email message header to a user, can cause the Internet Message Access Protocol IMAP THREAD command to consume excessive CPU resources. When a mail client processes this message, it can lead to degradation or a denial o...

CVE-2026-80688

A flaw was found in the Linux kernel, specifically within the RISC-V architecture's veccheckunalignedaccessspeedallcpus function. This function, intended for initialization, could continue running as a kernel thread after its allocated memory is released. If this occurs, the system attempts to...

EUVD-2026-68718

The I3C IBI subsystem in drivers/i3c/i3cibiworkq.c hands out statically-allocated work nodes through a free-list i3cibiworknodesfree implemented as a plain sysslistt, which provides no synchronization. The allocation helpers i3cibiworkenqueue, i3cibiworkenqueuetargetirq, i3cibiworkenqueuehotjoin,...

PT-2026-83952

The I3C IBI subsystem in drivers/i3c/i3c ibi workq.c hands out statically-allocated work nodes through a free-list i3c ibi work nodes free implemented as a plain sys slist t, which provides no synchronization. The allocation helpers i3c ibi work enqueue, i3c ibi work enqueue target irq, i3c ibi...

SUSE CVE-2026-40014

An attacker that can send mail to a user can craft a message header that makes the IMAP THREAD command consume CPU disproportionate to the size of the message. When a mail client issues a THREAD command on the affected mailbox, this can cause degradation or denial of service for IMAP. Monitor...

SUSE CVE-2026-40017

An attacker that can send mail to a user can craft a message header whose values are chosen to collide in an internal hash table, which makes the IMAP THREAD command consume CPU disproportionate to the size of the message. This is a separate issue from CVE-2026-40014 and is not addressed by that...