EUVD-2026-86477

Uncontrolled Resource Consumption CWE-400 / CWE-407 in the ANTLR 3 search query parser QueryParser / Query.g in Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 allows an unauthenticated remote attacker or an authenticated user if anonymous read...

CVE-2026-98087: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate A migratedisable'd RT task cannot be moved to another CPU, but the scheduler still keeps such a task on that CPU's pushable list rq-rt.pushabletasks and still...

The vulnerability of the Erlang-hex_core programming language, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Erlang-hexcore programming language is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2026-67222: Uncontrolled Resource Consumption

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, mechanisms/1 applied listtoatom/1 to every colon-delimited token in an attacker-controlled authmechanism value, permanently consuming Erlang VM atoms and allowing the node to be crashed with a larg...

The vulnerability of the Erlang/OTP software platform, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Erlang programming language is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

SUSE SLES12 Security Update : docker-stable (SUSE-SU-2026:1118-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1118-1 advisory. - CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption bsc1253904. Tenable has...

FragToken: Amplifying LLM Inference Costs through Noncanonical Token Generation

As large language model LLM inference becomes increasingly expensive, resource-consumption attacks pose a growing threat to model providers. Existing attacks typically amplify cost by inducing abnormally long or repetitive outputs on attacker-controlled or triggered requests, making them easier t...

The vulnerability of the Kibana visualization service’s collection management mechanism allows a perpetrator to trigger a service failure.

The vulnerability of the Kibana visualization service’s collection management mechanism is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the mechanism for processing internal API requests of the Kibana data visualization service allows a perpetrator to trigger a service failure.

The vulnerability of the mechanism for processing internal API requests of the Kibana data visualization service is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the SCRAM (Salted Challenge Response Authentication Mechanism) mechanism in the PostgreSQL PgBouncer connection pool allows a attacker to induce a service failure.

The vulnerability of the SCRAM Salted Challenge Response Authentication Mechanism mechanism in the PostgreSQL PgBouncer connection pool software is related to uncontrolled resource consumption due to the lack of a limit on the number of iterations required to generate a password. Exploiting this...

The vulnerability of the golang-x-net package in the Golang programming language, which involves uncontrolled resource consumption, allows attackers to trigger a service failure.

The vulnerability of the golang-x-net package in the Golang programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the expression processing mechanism in Timelion’s data visualization service Kibana allows a perpetrator to cause a service failure.

The vulnerability of the expression processing mechanism in Timelion’s Kibana visualization service is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the mechanism for processing user groups in the Containerd environment allows a attacker to trigger a service failure.

The vulnerability of the mechanism for handling user groups in the Containerd runtime is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a attacker to cause service failures...

The vulnerability of the PHP-phpseclib interpreter, related to uncontrolled resource consumption, allows attackers to trigger a service failure.

The vulnerability of the PHP-phpseclib interpreter is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the libssh library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the libssh library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PT-2026-98924

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 4.3.5 Description An authenticated user with permissions to bind a queue to a topic exchange and publish to it can cause a denial of service. By using consecutive segments in a binding key, the user can force topic...

Linux Distros Unpatched Vulnerability : CVE-2026-93242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Fix response queue over-consumption in qlaconsumeiocb qla24xxprocessresponsequeue advances ringptr past the head IOCB before dispatching, so by t...

Linux Distros Unpatched Vulnerability : CVE-2026-6669

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing upper bound on the key derivation iteration count accepted during SCRAM authentication to a backend server in PgBouncer through 1.25.2 allows a maliciou...

SUSE CVE-2026-93242

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix response queue over-consumption in qlaconsumeiocb qla24xxprocessresponsequeue advances ringptr past the head IOCB before dispatching, so by the time qlaconsumeiocb runs, ringptr already points at the first...

CVE-2026-87721

Uncontrolled Resource Consumption CWE-400 / CWE-407 in the ANTLR 3 search query parser QueryParser / Query.g in Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 allows an unauthenticated remote attacker or an authenticated user if anonymous read...