h2 library Resource Consumption DoS

The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2026-82904

Apache OFBiz versions 24.09 before 24.09.08 on all platforms are vulnerable to Uncontrolled Resource Consumption in the ServiceMultiEventHandler. A remote unauthenticated attacker can pin a server request thread by submitting a small HTTP request with parameter names encoding a row count via the **

CVE-2026-108838

IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption...

EUVD-2026-117108

IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-108838

IBM Db2 Genius Hub versions 1.1.2, 1.1.3, 1.1.4, and 1.1.5 are vulnerable to a denial of service (DoS) attack. A local attacker can exploit the software due to uncontrolled resource consumption (CWE-400). No specific exploit details or remediation steps are provided in the documents, but the vuln...

Security Bulletin: IBM Sterling Control Center has denial-of-service vulnerabilities in FasterXML jackson-databind due to Uncontrolled Resource Consumption (CVE-2026-91776, CVE-2026-91777)

Summary Multiple high-severity vulnerabilities have been identified in FasterXML jackson-databind. CVE-2026-91776 is a memory exhaustion vulnerability caused by unbounded caching of attacker-supplied, unrecognized polymorphic type identifiers when name-based polymorphic deserialization with a...

PT-2026-137134

IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-116668 Tanium addressed an uncontrolled resource consumption vulnerability in Discover.

Tanium addressed an uncontrolled resource consumption vulnerability in Discover...

CVE-2026-116668

Tanium addressed an uncontrolled resource consumption vulnerability (CWE-400) within the Discover component. The vulnerability allows for an impact on availability , as indicated by the CVSS 3.1 score of 4.3. No specific technical root causes, affected versions, or exploit details are provided in...

CVE-2026-116646 Tanium addressed an uncontrolled resource consumption vulnerability in Threat Response.

Tanium addressed an uncontrolled resource consumption vulnerability in Threat Response...

CVE-2026-121388 FreeRDP 3.0.0 before 3.32.2 Uncapped Memory Allocation via DRDYNVC DATA_FIRST

FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to force large client allocations through the DRDYNVC DATAFIRST Length field. Attackers can declare lengths up to 4,294,967,295 bytes on running dynamic channels, causing...

CVE-2026-121388 FreeRDP 3.0.0 before 3.32.2 Uncapped Memory Allocation via DRDYNVC DATA_FIRST

FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to force large client allocations through the DRDYNVC DATAFIRST Length field. Attackers can declare lengths up to 4,294,967,295 bytes on running dynamic channels, causing...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to jackson-core and jackson-databind

Summary IBM App Connect Enterprise Runtime and Toolkit are vulnerable to multiple vulnerabilities due to jackson-core and jackson-databind. Vulnerability Details CVEID:CVE-2026-89407 DESCRIPTION: NumberInput.looksLikeValidNumber in FasterXML jackson-core pre-validates "stringified numbers" with t...

Security Bulletin: Vulnerability in Netty affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Netty has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerability...

Security Bulletin: Vulnerability in adm-zip affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in adm-zip has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerabili...

Security Bulletin: Vulnerability in pyasn1 affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in pyasn1 has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerabilit...

Security Bulletin: IBM Sterling Control Center has denial-of-service vulnerabilities in FasterXML Jackson Core due to Uncontrolled Resource Consumption (CVE-2026-89407, CVE-2026-89425)

Summary Multiple high-severity vulnerabilities have been identified in FasterXML Jackson Core. CVE-2026-89407 may allow attackers to trigger excessive CPU consumption through specially crafted numeric inputs, resulting in a Denial-of-Service DoS condition. CVE-2026-89425 may lead to excessive...

`codeq`: decoding untrusted input can allocate memory from an unchecked length prefix (denial of service)

codeq is a serialization library whose Decode trait reads length-prefixed values. For String and Vec, the length-prefixed Decode implementations read a 4-byte big-endian length and allocate a buffer of that size before reading the payload. Because the declared length is taken straight from the...

RUSTSEC-2026-0432 `codeq`: decoding untrusted input can allocate memory from an unchecked length prefix (denial of service)

codeq is a serialization library whose Decode trait reads length-prefixed values. For String and Vec, the length-prefixed Decode implementations read a 4-byte big-endian length and allocate a buffer of that size before reading the payload. Because the declared length is taken straight from the...

CLEANSTART-2026-YI76477 Uncontrolled Resource Consumption vulnerability in the HTTP/1

CVE-2026-54399 affects multiple packages. Uncontrolled Resource Consumption vulnerability in the HTTP/1. See references for individual vulnerability details...