CVE-2026-75655

Adobe Bridge is affected by an Uncontrolled Recursion vulnerability (CWE-674) that could allow an attacker to achieve arbitrary code execution in the context of the current user. Exploitation requires user interaction , specifically when a victim opens a malicious file. No specific software versi...

CVE-2026-75655 Bridge | Uncontrolled Recursion (CWE-674)

Bridge is affected by an Uncontrolled Recursion vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a...

EUVD-2026-84760

A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

CVE-2026-95861

A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

CVE-2026-95861

Certain UniFi gateway devices are vulnerable to an Uncontrolled Recursion vulnerability. A malicious actor with network access can exploit this flaw to perform a Denial of Service (DoS) attack against the device. No specific software versions, root cause files, or remediation steps are provided i...

CVE-2026-95861

A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

Security Bulletin: Due to the use of Bouncy Castle for Java, IBM Sterling Control Center is vulnerable to Uncontrolled Recursion(CVE-2026-59645)

Summary Bouncy Castle for Java is used by IBM Sterling Control Center as part of dependency in bcutil-jdk18on-1.81.jar Vulnerability Details CVEID:CVE-2026-59645 DESCRIPTION: In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. Thi...

Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition

Summary Multiple vulnerabilities were addressed in IBM Tivoli Network Manager IP Edition 4.2.0.25 Vulnerability Details CVEID:CVE-2026-45205 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted configuration file, Commons Configuration will throw a...

CVE-2026-75655: Uncontrolled Recursion

Bridge is affected by an Uncontrolled Recursion vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a...

CVE-2026-63386: Uncontrolled Recursion

js-toml is a TOML parser for JavaScript. Prior to 1.1.3, load does not bound nesting or dotted-key depth in the recursive parser at src/load/parser.ts or the interpreter at src/load/interpreter.ts, so deeply nested arrays, deeply nested inline tables, or long dotted keys can exhaust the V8 call...

CVE-2026-95861: Uncontrolled Recursion

A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

ROS-20260922-73-0132

The vulnerability in Python-Django is related to an uncontrolled recursion. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-96977

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description An Uncontrolled Recursion issue exists that could allow arbitrary code execution in the context of the current user. This occurs when a victim opens a malicious file, requiring user interactio...

PT-2026-96964

Name of the Vulnerable Software and Affected Versions UniFi gateway devices affected versions not specified Description A network-based actor can exploit an Uncontrolled Recursion issue to trigger a Denial of Service DoS attack, which occurs when a program calls itself repeatedly without a proper...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dovecot (UTSA-2026-090074)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090074 advisory. In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a craft...

K000163359: Python vulnerability CVE-2026-30922

Security Advisory Description pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containi...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the recursive traversal of deeply nested unary expressions in the AST. An attacker can cause a fatal stack overflow and terminate the process by submitting specially crafted SQL input that results in...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the parsing process of WS-Policy documents containing deeply nested policy elements. An attacker can cause the application to exhaust the thread stack and crash the parser by submitting specially crafted...

SUSE-SU-2026:23865-1 Security update for alloy

This update for alloy fixes the following issues: - CVE-2026-1229: github.com/cloudflare/circl: the CombinedMult function in the ecc/p384 package produces an incorrect value for specific inputs bsc1265542. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...

CVE-2026-91863 Apache Neethi: Uncontrolled recursion while parsing crafted WS-Policy documents allows denial of service

A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread stack, crashing the parser denial of service. Users are recommended to upgrade to version 3.2.4, which fixes this issue...