CVE-2026-81721

openssl_encrypt before 1.4.9 fails to validate KDF cost parameters (Argon2, scrypt, or balloon) in encrypted file metadata and keystore headers. An unauthenticated attacker over the network can craft a malicious encrypted file declaring arbitrarily large KDF parameters, triggering unbounded memor...

CVE-2026-81720 openssl_encrypt before 1.4.9 Denial of Service via Unbounded Argon2

opensslencrypt before 1.4.9 fails to validate the memorycost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive...

CVE-2026-81720 openssl_encrypt before 1.4.9 Denial of Service via Unbounded Argon2

opensslencrypt before 1.4.9 fails to validate the memorycost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive...

CVE-2026-81699

openssl_encrypt versions before 1.4.9 fail to properly validate key derivation function (KDF) costs in crafted files. An attacker can supply a malicious file with excessive KDF parameters over the network with no privileges required , triggering unbounded memory and CPU exhaustion during pre-auth...

CVE-2026-81699 openssl_encrypt before 1.4.9 Denial of Service via unbounded KDF cost

opensslencrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounded memory and CPU exhaustion during pre-authentication processing. Attackers can supply malicious files with excessive KDF parameters to exhaust syst...

CVE-2026-81699 openssl_encrypt before 1.4.9 Denial of Service via unbounded KDF cost

opensslencrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounded memory and CPU exhaustion during pre-authentication processing. Attackers can supply malicious files with excessive KDF parameters to exhaust syst...

CVE-2026-58063

A flaw was found in Bouncy Castle for Java. A remote attacker can exploit this vulnerability by providing a specially crafted BCFKS keystore file that specifies an unbounded Key Derivation Function KDF cost. This can lead to a Denial of Service DoS as the system attempts to process the file,...

CVE-2026-15055

A flaw was found in Bouncy Castle for Java. An attacker could exploit this vulnerability by providing a specially crafted input to the PKCS8 / PBES2 decryptors. This input could specify an excessively high Key Derivation Function KDF cost, causing the decryptor to consume significant computationa...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: fixed the divide by 0 error in calclcoefs The issue arises when the value of u64 is set to cost.model, and then trying to perform a division operation. This could lead to a divide by 0 error. Example: echo 8:0...

CVE-2026-70833

Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Landed...

CVE-2026-70735

Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion component: Deployment. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-62540

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite component: Cost Planning. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Cost Management...

EUVD-2026-61784

Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Landed...

EUVD-2026-61538

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite component: Cost Planning. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Cost Management...

PT-2026-77734

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000 Description A flaw in the Deployment component allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can result ...

PT-2026-77722

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000 Description A flaw in the Deployment component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to unauthorized...

PT-2026-77828

Name of the Vulnerable Software and Affected Versions Oracle Landed Cost Management versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Landed Cost Management product of Oracle E-Business Suite. A low privileged attacker with network acce...

PT-2026-77729

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000 Description An issue in the Deployment component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead...

PT-2026-77582

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Cost Management versions 12.2.3 through 12.2.15 Description A flaw exists in the Cost Planning component of the Oracle Cost Management product. A high privileged attacker with network access via HTTP can exploit...

atomic-agents-stack: Parallel helper/delegate batch reserves $0 for models absent from the pricing table, bypassing the cost-cap fan-out guard

estimatebatchcost atomicagents/agent.py looks up the per-model output price with PRICING.getmodel, , returning 0.0 for any model not in the hardcoded pricing table. checkbatchreservation then early-returns when the reservation is 0 and that an over-cap unknown-model batch raises...