CVE-2026-83834

FSRendezvousServer::PublishRx and FSRendezvousServer::ConsumeTx dereference a FSStreamReg object with an identical, broken pattern: take the server mutex, confirm the object is still list-resident, drop the mutex, then take the object's own lock — with nothing in between to keep it alive. Because...

tomcat-embed-core-9.0.31-CVE-2020-11996

Please see the PoC in testImplicitCloseLargeId unit test of TestHttp2Section51.java: https://github.com/rusakovichma/tomcat-embed-core-9.0.31-CVE-2020-11996/blob/master/test/org/apache/coyote/http2/TestHttp2Section51.java...

Action Pack: Possible DoS vulnerability in Action Controller Live streaming

Impact ActionController::Live::Bufferclose pushes its end-of-stream marker onto the response's bounded queue while it holds the buffer's monitor. When the client has stopped reading and the queue is full, the push blocks, and Bufferabort, which runs when the client disconnects or a write times ou...

EUVD-2026-123002

Action Pack: Possible DoS vulnerability in Action Controller Live streaming...

GHSA-RWVH-FW6R-PWVP Action Pack: Possible DoS vulnerability in Action Controller Live streaming

Impact ActionController::Live::Bufferclose pushes its end-of-stream marker onto the response's bounded queue while it holds the buffer's monitor. When the client has stopped reading and the queue is full, the push blocks, and Bufferabort, which runs when the client disconnects or a write times ou...

UBUNTU-CVE-2026-126072

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionController::Live::Bufferclose pushes its end-of-stream marker onto the response's bounded queue while it holds the buffer's monitor. When the client has stopped reading and the queue is ful...

Linux Distros Unpatched Vulnerability : CVE-2026-126072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionController::Live::Bufferclose pushes its end-of-stre...

DEBIAN-CVE-2026-126072

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionController::Live::Bufferclose pushes its end-of-stream marker onto the response's bounded queue while it holds the buffer's monitor. When the client has stopped reading and the queue is ful...

CVE-2026-126072 Action Pack: Possible DoS vulnerability in Action Controller Live streaming

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionController::Live::Bufferclose pushes its end-of-stream marker onto the response's bounded queue while it holds the buffer's monitor. When the client has stopped reading and the queue is ful...

CVE-2026-126072

Action Pack versions prior to 8.1.4.1 and 8.0.5.2 are vulnerable to a Denial of Service (DoS) via thread exhaustion. The issue resides in ActionController::Live::Buffer#close , which pushes an end-of-stream marker onto a bounded queue while holding the buffer's monitor. If a client stops reading ...

CVE-2026-126072

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionController::Live::Bufferclose pushes its end-of-stream marker onto the response's bounded queue while it holds the buffer's monitor. When the client has stopped reading and the queue is ful...

CVE-2026-126072 Action Pack: Possible DoS vulnerability in Action Controller Live streaming

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionController::Live::Bufferclose pushes its end-of-stream marker onto the response's bounded queue while it holds the buffer's monitor. When the client has stopped reading and the queue is ful...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Clear SNDRVTIMERIFLGDEAD once the close completes sndtimercloselocked marks an instance with SNDRVTIMERIFLGDEAD and returns early when the flag is already set; however, the flag is never cleared again. A completed...

PT-2026-136998

Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. From 0.21.0 until 0.29.0, the Kubernetes request correlator in warpgate-protocol-kubernetes/src/correlator.rs keys an authorized AdmittedTarget by username, target name, and client IP rather than by the immutable user UUID,...

CVE-2026-117606

NexoPOS through 6.3.0 contains a missing authorization vulnerability that allows authenticated cashiers to manipulate other cashiers' register sessions because CashRegistersService never compares usedby with the user. Attackers holding the default nexopos.use.registers permission can submit...

CVE-2026-117606

Versions of NexoPOS up to and including 6.3.0 are vulnerable to a missing authorization flaw in the CashRegistersService . The system fails to verify if the used_by field matches the current user, allowing authenticated cashiers with the nexopos.use.registers permission to manipulate other cashie...

EUVD-2026-111541

NexoPOS through 6.3.0 contains a missing authorization vulnerability that allows authenticated cashiers to manipulate other cashiers' register sessions because CashRegistersService never compares usedby with the user. Attackers holding the default nexopos.use.registers permission can submit...

CVE-2026-109942

A flaw was found in FreeRDP. A malicious or compromised Remote Desktop RD Gateway server can trigger a Denial of Service DoS by sending a specially crafted close-channel packet lacking payload data. The client fails to validate the missing payload before processing, causing the FreeRDP applicatio...

Linux Distros Unpatched Vulnerability : CVE-2026-111804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and forwards unvalidated guest-supplied metric IDs to the...

CVE-2026-112381 Apache Traffic Server: Nullptr dereference in net_write_io on a POST half-close with chunked response

Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via half-close while a chunked origin response is being reparsed from a reentrant write-ready callback, a timing-dependent race introduced by the CVE-2021-32564 flow-control backports. This iss...