The vulnerabilities of the Ingress components and Custom Resource Definitions (CRDs) of the NGINX Ingress Controller platform allow a malicious actor to insert arbitrary configuration directives into NGINX, gain unauthorized access to file creation and deletion operations, or trigger service failures.

The vulnerability of the Ingress components and Custom Resource Definitions CRDs of the NGINX Ingress Controller monitoring and management platform is related to the lack of measures taken to neutralize special elements during the processing of string values. Exploiting this vulnerability allows ...

EUVD-2026-54655

A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous systool instruction handlng path in httpd does not properly synchronize or safely manage concurrent systool operations. By sending crafted systool instructions through the asynchronous request path,...

CVE-2025-71412 In CPDLC, False Emergency or Status Messages Will be Accepted as Legitimate

Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion, and improper response actions by flight crews, traffic controllers, and ground operations. This type of attack can be carried out remotely over radio frequency...

CPDLC over ATN-B1 Vulnerabilities

ADVISORY SUMMARY ATN-B1 CPDLC relies on legacy clear text unauthenticated radio frequency links. Research demonstrates that these characteristics allow unauthorized message injection, denial-of-service conditions, and forced session resets. These vulnerabilities do not constitute an unsafe...

Inefficient Algorithmic Complexity

Overview league/commonmark is a PHP-based Markdown parser which supports the full CommonMark spec. It is based on the CommonMark JS reference implementation. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the FootnoteExtension process. An attacker can...

CVE-2026-68480

An attacker executing code on affected system could inject an interrupt at a precise moment to disrupt "Safe RET", the default Linux mitigation for speculative Return Overflow SRSO, which could potentially weaken that protection and may result in information disclosure...

CVE-2026-16316

OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampled Values SV frame processing. A specially crafted SV frame can cause the affected process to terminate, disrupting alert processing for Sampled Values traffic. The vulnerability does not affect...

EUVD-2026-53922

OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampled Values SV frame processing. A specially crafted SV frame can cause the affected process to terminate, disrupting alert processing for Sampled Values traffic. The vulnerability does not affect...

CVE-2026-16316 Malformed IEC 61850 Sampled Values frames cause partial denial of service in StationGuard

OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampled Values SV frame processing. A specially crafted SV frame can cause the affected process to terminate, disrupting alert processing for Sampled Values traffic. The vulnerability does not affect...

CVE-2025-14779

The Secret Type Management REST API does not correctly isolate access controls when deleting a secret type. The on-delete cascade logic, when triggered, fails to enforce organizational boundaries, leading to the removal of secrets associated with that type across all organizations. Exploitation o...

CVE-2025-14779 Improper Access Control via Secret Type Management API in WSO2 Identity Server

The Secret Type Management REST API does not correctly isolate access controls when deleting a secret type. The on-delete cascade logic, when triggered, fails to enforce organizational boundaries, leading to the removal of secrets associated with that type across all organizations. Exploitation o...

ROS-20260806-73-0004

The vulnerability of the iodynfindioregion function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260806-73-0017

The vulnerability of the idxdfree function in the lib/refcount.c library of the dmaengine component of the Linux operating system’s kernel relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

The vulnerability of the GPU components in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the GPU components in Google Chrome and Microsoft Edge relates to reading data from buffer areas beyond their acceptable limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows attackers to induce a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

ROS-20260806-73-0027

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to improper handling of exceptional conditions. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the Views component in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.

The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially created PDF file...

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted HTML page...

The vulnerability of the DOM components in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.

The vulnerability of the DOM components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of the tcpmss_mt() function in the net/netfilter/xt_tcpmss.c module of the netfilter component of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the tcpmssmt function in the net/netfilter/xttcpmss.c module of the netfilter component of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...