CVE-2026-123570

The hickory-proto (Hickory DNS) library versions 0.18 through 0.26.2 is vulnerable to a Memory Amplification Denial of Service (DoS) . The vulnerability exists in the DNS wire-format message parser, which preallocates record vectors based on untrusted ANCOUNT , NSCOUNT , and ARCOUNT header fields...

EUVD-2026-119455

The DNS wire-format message parser in hickory-proto Hickory DNS 0.18 before 0.26.2 preallocates record vectors sized by the untrusted ANCOUNT, NSCOUNT, and ARCOUNT header fields before reading record data. Remote attackers can send a UDP datagram, or a spoofed response to a client/resolver, with...

PT-2026-139851

The DNS wire-format message parser in hickory-proto Hickory DNS 0.18 before 0.26.2 preallocates record vectors sized by the untrusted ANCOUNT, NSCOUNT, and ARCOUNT header fields before reading record data. Remote attackers can send a UDP datagram, or a spoofed response to a client/resolver, with...

CVE-2026-123570: hickory-dns: The DNS wire-format message parser in hickory-proto (Hickory DNS) 0.18 before 0.26.2 preallocates record vectors sized…

The DNS wire-format message parser in hickory-proto Hickory DNS 0.18 before 0.26.2 preallocates record vectors sized by the untrusted ANCOUNT, NSCOUNT, and ARCOUNT header fields before reading record data. Remote attackers can send a UDP datagram, or a spoofed response to a client/resolver, with...

CVE-2026-46560 OpenAM Authentication Bypass via RADIUS Spoofing

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the RADIUS authentication module opens an unconnected datagram socket and trusts the first UDP datagram received on the client source port. The receive path does not verify the source IP and port, match the response...

CVE-2026-46560

In OpenAM Community Edition (through version 16.0.6 ), an Improper Verification of Cryptographic Signature (CWE-347) in the RADIUS authentication module allows unauthenticated network attackers to bypass authentication. The module opens an unconnected datagram socket and accepts the first UDP dat...

Open Identity Platform OpenAM encryption issue vulnerability

Versions of OpenAM prior to 16.1.1 contain an encryption-related vulnerability. This vulnerability arises because the RADIUS authentication module trusts the first UDP datagram received from a client source port; it fails to validate the source IP and port, the response identifier, or the RFC 286...

DEBIAN-CVE-2026-116744

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissectsoftetherhostfqdn in softether.c that compares hostname using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp t...

CVE-2026-116744 ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther Dissector

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissectsoftetherhostfqdn in softether.c that compares hostname using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp t...

PT-2026-125493

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect softether host fqdn in softether.c that compares host name using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strnc...

CentOS Linux 7 [TuxCare] Security Update: unbound / unbound-devel / unbound-libs / unbound-python Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792811393)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792811393 advisory. - In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with...

CVE-2026-76445

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service DoS condition. The vulnerability is due to a flaw in logic handling...

CVE-2026-76445 Multiple Cisco Products Snort 3 Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service DoS condition. The vulnerability is due to a flaw in logic handling...

CVE-2026-76445

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine caused by a logic flaw when processing GPRS Tunneling Protocol (GTP) extension headers within the codec. An unauthenticated, remote attacker can exploit this by sending a crafted, fragmented UDP datagram conta...

EUVD-2026-107385

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service DoS condition. The vulnerability is due to a flaw in logic handling...

CVE-2026-76445 Multiple Cisco Products Snort 3 Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service DoS condition. The vulnerability is due to a flaw in logic handling...

Multiple Cisco Products Snort 3 Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service DoS condition. The vulnerability is due to a flaw in logic handling...

CVE-2026-109125 Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold'

In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with 'unwanted-reply-threshold 0' configurations not a default configuration. If a response-like UDP datagram reaches the upstream source port currently used by a recursive query, but i...

CVE-2026-109125

NLnet Labs Unbound up to and including version 1.26.1 is vulnerable to a cache-level side-channel when configured with unwanted-reply-threshold > 0 (which is not the default). The vulnerability occurs because Unbound counts response-like UDP datagrams that do not match a pending query's TXID as

PT-2026-120690

Name of the Vulnerable Software and Affected Versions Cisco products affected versions not specified Description A flaw in the Snort 3 Detection Engine allows an unauthenticated remote attacker to cause a denial of service DoS condition. The issue occurs during the processing of General Packet...