Security Bulletin: IBM MQ queue manager is vulnerable to denial of service (CVE-2026-12150)

Summary IBM MQ has addressed an unbounded recursion vulnerability in the queue manager's TLS certificate parser that could allow a remote unauthenticated attacker with a valid TLS certificate to cause a denial of service Vulnerability Details CVEID:CVE-2026-12150 DESCRIPTION: IBM MQ could allow a...

CVE-2026-78130

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...

CVE-2026-78132

strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax...

EUVD-2026-75904

strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser...

CVE-2026-78131

strongSwan versions 4.2.0 through 6.0.7 contain a memory leak in the x509 plugin's attribute certificate parser , specifically a missing release of memory after its effective lifetime when parsing identities in X.509 attribute certificates. The result is a denial of service via memory exhaustion....

CVE-2026-78130

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...

CVE-2026-78130

strongSwan (IKE/IPsec suite), versions 4.2.0 through 6.0.7 , contains a NULL pointer dereference in the x509 plugin during the verification of X.509 attribute certificates. An attacker can trigger this remotely over the network without authentication, leading to a denial of service (high availabi...

CVE-2026-78130

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...

EUVD-2026-75903

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...

CVE-2026-78130

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...

CVE-2026-78130

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...

CVE-2026-78131: Missing Release of Memory after Effective Lifetime

strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser...

CVE-2026-78130: NULL Pointer Dereference

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...

SUSE CVE-2026-78130

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...

SUSE CVE-2026-78131

strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser...

SUSE CVE-2026-78132

strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax...

PT-2026-89677

Name of the Vulnerable Software and Affected Versions strongSwan versions 4.2.0 through 6.0.7 Description A NULL pointer dereference exists in the x509 plugin's attribute certificate parser. This issue is network exploitable and requires no authentication, potentially leading to a Denial of Servi...

Exploit for CVE-2026-6789

--- 9. CVE-2026-6789 – Stack Buffer Overflow in Embedded TLS...

EUVD-2016-7235

Malware in sbrugna...

DEBIAN-CVE-2024-58261

The sequoia-openpgp crate 1.13.0 before 1.21.0 for Rust allows an infinite loop of "Reading a cert: Invalid operation: Not a Key packet" messages for RawCertParser operations that encounter an unsupported primary key type...