CVE-2026-94398 Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

EUVD-2026-87797

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

CVE-2026-94398

The Elasticsearch search and analytics engine is vulnerable to Uncontrolled Resource Consumption (CWE-400) , which can lead to a denial of service (DoS) via Excessive Allocation (CAPEC-130) . This issue affects all configurations across multiple versions, including 8.x (8.12.0 through 8.19.21) an...

CVE-2026-82300

Elasticsearch is susceptible to Uncontrolled Resource Consumption (CWE-400) which can result in a denial of service due to Excessive Allocation (CAPEC-130). The vulnerability affects all versions from 8.0.0 up to and including 8.19.21 , and versions 9.0.0 through 9.4.7 and 9.5.0 through 9.5.3 . I...

CVE-2026-82300 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...

CVE-2026-82300 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...

EUVD-2026-87796

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...

EUVD-2026-87795

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...

CVE-2026-82294 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...

CVE-2026-82294

A Uncontrolled Resource Consumption (CWE-400) vulnerability in Elasticsearch can lead to a Denial of Service via Excessive Allocation (CAPEC-130). The issue affects all configurations with analytical aggregation search capabilities enabled. Specifically, it impacts versions 8.0.0 through 8.19.20 ...

CVE-2026-82294 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...

CVE-2026-100662

Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.0.Final through 4.2.17.Final contain an uncontrolled resource consumption vulnerability in the QPACK encoder-stream instruction decoder QpackEncoderHandler, installed on the peer-initiated unidirectional QPACK encoder stream, type 0x02...

CVE-2026-100662

Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.0.Final through 4.2.17.Final contain an uncontrolled resource consumption vulnerability in the QPACK encoder-stream instruction decoder QpackEncoderHandler, installed on the peer-initiated unidirectional QPACK encoder stream, type 0x02...

CVE-2026-100662

Netty's HTTP/3 codec (io.netty:netty-codec-http3 ) versions 4.2.0.Final through 4.2.17.Final are vulnerable to an uncontrolled resource consumption flaw in the QpackEncoderHandler (QPACK encoder-stream instruction decoder). The handler fails to enforce limits on the Name Length and Value Length f...

EUVD-2026-87756

Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.0.Final through 4.2.17.Final contain an uncontrolled resource consumption vulnerability in the QPACK encoder-stream instruction decoder QpackEncoderHandler, installed on the peer-initiated unidirectional QPACK encoder stream, type 0x02...

CVE-2026-100662

Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.0.Final through 4.2.17.Final contain an uncontrolled resource consumption vulnerability in the QPACK encoder-stream instruction decoder QpackEncoderHandler, installed on the peer-initiated unidirectional QPACK encoder stream, type 0x02...

CVE-2026-100658

Removed by vendor...

CVE-2026-100648 vllm before 0.29.0 Uncontrolled Resource Consumption via Audio Decoding

vllm before 0.29.0 fails to enforce VLLMMAXAUDIOCLIPFILESIZEMB limit in multimodal chat audio decoding, allowing unauthenticated clients to bypass file size restrictions. Attackers can submit oversized audio files through chat endpoints to consume excessive memory and CPU resources during decodin...

CVE-2026-100648 vllm before 0.29.0 Uncontrolled Resource Consumption via Audio Decoding

vllm before 0.29.0 fails to enforce VLLMMAXAUDIOCLIPFILESIZEMB limit in multimodal chat audio decoding, allowing unauthenticated clients to bypass file size restrictions. Attackers can submit oversized audio files through chat endpoints to consume excessive memory and CPU resources during decodin...

CVE-2026-100648 vllm before 0.29.0 Uncontrolled Resource Consumption via Audio Decoding

vllm before 0.29.0 fails to enforce VLLMMAXAUDIOCLIPFILESIZEMB limit in multimodal chat audio decoding, allowing unauthenticated clients to bypass file size restrictions. Attackers can submit oversized audio files through chat endpoints to consume excessive memory and CPU resources during decodin...