PT-2026-70288

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description An improper conditions check within Ring 2: Device Drivers may allow a network adversary to cause a denial of service. This issue can be triggered by ...

PT-2026-70290

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description An out-of-bounds write in the Ring 2 device drivers allows an unauthenticated network adversary to cause a denial of service. This issue can be...

PT-2026-70289

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software affected versions not specified Description Improper access control within Ring 2: Device Drivers allows an unprivileged, unauthenticated local adversary to trigger a denial of service. This low-complexity...

PT-2026-70294

Name of the Vulnerable Software and Affected Versions LLM Scaler software affected versions not specified Description A protection mechanism failure within Ring 3 the least privileged level of the CPU architecture where user applications run may allow an escalation of privilege. A local,...

CVE-2026-32791: Untrusted Search Path

Untrusted search path for some IntelR Performance Counter Monitor IntelR PCM before version tag 202604 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

PT-2026-70303

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description Uncontrolled resource consumption within Ring 2: Device Drivers may allow a denial of service. An unprivileged software adversary with an...

brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...

openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...

openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...

Security Bulletin: IBM Security QRadar Log Management AQL Plugin is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. IBM Security QRadar Log Management AQL Plugin has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-59879 DESCRIPTION:...

AZL-95619 CVE-2026-18503 affecting package python3 for versions less than 3.12.14-1

Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff...

RHEL 10 : nodejs-nodemon (RHSA-2026:52394)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:52394 advisory. Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch th...

CVE-2026-19353 DedeCMS Installation Wizard index.php _4_Setup file inclusion

A vulnerability has been found in DedeCMS up to 5.7.118 UTF8SP2. The affected element is the function 4Setup of the file install/index.php of the component Installation Wizard. Such manipulation leads to file inclusion. The attack can be executed remotely. This attack is characterized by high...

CVE-2026-19352: Server-Side Request Forgery (SSRF)

A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unknown functionality of the file src/main/httpServer.ts of the component Built-in HTTP API Service. Executing a manipulation can lead to server-side request forgery. The attack requires access to the...

CVE-2026-19353: External Control of File Name or Path

A vulnerability has been found in DedeCMS up to 5.7.118 UTF8SP2. The affected element is the function 4Setup of the file install/index.php of the component Installation Wizard. Such manipulation leads to file inclusion. The attack can be executed remotely. This attack is characterized by high...

NPM: Hono: Algorithmic Complexity DoS in Language Middleware

NPM: Hono: Algorithmic Complexity DoS in Language Middleware vulnerability discovered by ? in WordPress Npm hono versions = 4.12.0, 4.12.34...

Inefficient Algorithmic Complexity

Overview hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the languageDetector middleware. An attacker can cause excessive CPU consumption and block unrelated requests by sending crafted language tags with ...

GHSA-54FX-42GC-7VW4 Hono: Algorithmic Complexity DoS in Language Middleware

Summary The languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen-separated subtags. Details To implement progressive language-tag truncation, normalizeLanguage repeatedly calls parts.slice0...

Hono: Algorithmic Complexity DoS in Language Middleware

Summary The languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen-separated subtags. Details To implement progressive language-tag truncation, normalizeLanguage repeatedly calls parts.slice0...

Inefficient Algorithmic Complexity

Overview org.webjars.npm:hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the languageDetector middleware. An attacker can cause excessive CPU consumption and block unrelated requests by sending crafted...