CVE-2026-16831

IBM AIX 7.2 and 7.3, and PowerVM VIOS 4.1 are vulnerable to a network-exploitable denial-of-service via uncontrolled resource consumption (CVSS 7.5 HIGH, no auth required). No patch or exploitation details are provided; monitor the IBM support reference for updates.

EUVD-2026-62719

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-16831 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-19507 RDK WebUI uncontrolled resource consumption

Uncontrolled resource consumption in check.jst in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote unauthenticated attacker to cause denial of service via excessively large password values...

CVE-2026-19507

The RDK-B WebUI (version rdkb-2025q4-kirkstone.04.10.26) contains a vulnerability in the /usr/www2/check.jst login handler due to uncontrolled resource consumption . The application fails to limit the length of submitted passwords and performs SHA-256 hashing on the entire input string. A remote,...

EUVD-2026-62715

Uncontrolled resource consumption in check.jst in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote unauthenticated attacker to cause denial of service via excessively large password values...

CVE-2026-19507 RDK WebUI uncontrolled resource consumption

Uncontrolled resource consumption in check.jst in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote unauthenticated attacker to cause denial of service via excessively large password values...

CVE-2026-59887

A flaw was found in linkify-it, a library for recognizing links. A remote attacker could exploit this vulnerability by providing specially crafted user text. The mailto: schema validator, when processing this input, can be repeatedly invoked, leading to excessive CPU consumption. This can result ...

CVE-2026-16818

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-16690

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-16818

CVE-2026-16818 affects IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 , allowing a remote, unauthenticated attacker to cause a denial of service through uncontrolled resource consumption . The CVSS 3.1 score is 7.5 (HIGH) with a network attack vector requiring no privileges or user interaction. CIS...

CVE-2026-16818 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

EUVD-2026-62528

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-16818 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

EUVD-2026-62520

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-16690 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...

PYSEC-2026-3661 devpi-server may leak database contents

Impact If the replication protocol is enabled by using the primary or deprecated master role for a server instance, then the +changelog URL route can be used to read the complete database content including password hashes, and the ids and salts of tokens from devpi-tokens by using a trivially...

Uncontrolled Resource Consumption

RabbitMQ Java client library is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to ValueReader.readBytes allocating a byte array based on a wire-declared content length before verifying the actual bytes available in the frame, which allows a malicious unauthenticated AMQ...

BIT-MONGODB-2026-13074 Awaitable Hello Command in Exhaust Mode Unthrottled Response Loop Leading to Denial of Service

An unauthenticated remote client can cause excessive CPU consumption on a MongoDB server by sending a specific combination of parameters to the awaitable hello command in exhaust mode. The server's handling of this combination results in a response loop that bypasses normal throttling, allowing a...