CVE-2026-102051 Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled

An Improper Release of Memory Before Removing Last Reference vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause l2cpd memory exhaustion and Layer 2 control-plane disruption via LLDP traffic when fast...

CVE-2026-101974

An Improper Validation of Specified Quantity in Input vulnerability exists in the rpd component of Juniper Networks Junos OS and Junos OS Evolved . When link-local TE processing is used, an adjacent OSPF peer can send malformed OSPF packets to cause a rpd crash (service disruption) or lead to rpd...

CVE-2026-101995

The l2ald daemon in Juniper Networks Junos OS and Junos OS Evolved is vulnerable to an Improper Validation of Specified Quantity in Input vulnerability (CWE-1284 ). An adjacent attacker with access to an ICCP peer session can exploit this by sending malformed ICCP packets , resulting in memory di...

EUVD-2026-101444

An Improper Validation of Specified Quantity in Input vulnerability in the l2ald of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker with access to an ICCP peer session to cause memory disclosure and disruption of the l2ald daemon via malformed ICCP packets...

CVE-2026-101995 Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption

An Improper Validation of Specified Quantity in Input vulnerability in the l2ald of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker with access to an ICCP peer session to cause memory disclosure and disruption of the l2ald daemon via malformed ICCP packets...

EUVD-2026-101437

A Reachable Assertion vulnerability in the Two-Way Active Measurement Protocol TWAMP client of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause rmopd service disruption via a specific TCP packet...

EUVD-2026-101432

An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause telemetry-service disruption, information disclosure, or potential root-level code execution via a crafted message to the gNMI...

CVE-2026-101965

A Use of Externally-Controlled Format String vulnerability exists in the gRPC daemon of Juniper Networks Junos OS Evolved . An authenticated network attacker can send a crafted message to the gNMI service to trigger this flaw when network analytics telemetry is enabled. Potential impacts include ...

CVE-2026-101965 Junos OS Evolved: An attacker causes telemetry disruption when network analytics telemetry is enabled

An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause telemetry-service disruption, information disclosure, or potential root-level code execution via a crafted message to the gNMI...

stegowiper

stegoWiper: A powerful and flexible active attack for disrupting stegomalware Over the last 10 years, many threat groups have employed stegomalware or other steganography-based techniques to attack organizations from all sectors and in all regions of the world. Some examples are: APT15/Vixen Pand...

CVE-2026-92908

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, causing a limited disruption to availability...

CVE-2026-92908

Adobe Commerce is affected by an Incorrect Authorization vulnerability (CWE-863) that enables a Security feature bypass . A low-privileged attacker can exploit this issue without user interaction to gain unauthorized read and write access , which may result in a limited disruption to availability...

CVE-2026-93204

A flaw was found in the batman-adv component of the Linux kernel. When a Media Access Control MAC address is updated, the update is not performed atomically. This allows a parallel process to read a partially updated MAC address, which could then be used to poison the Address Resolution Protocol...

stegowiper

stegoWiper: Un ataque activo potente y flexible para interrumpir el stegomalware Durante los últimos 10 años, muchos grupos de amenazas han empleado stegomalware u otras técnicas basadas en esteganografía para atacar organizaciones de todos los sectores y en todas las regiones del mundo. Algunos...

CVE-2026-98255

A flaw was found in the Linux kernel. Its TCP Transmission Control Protocol fast-path processing logic fails to properly filter out-of-bounds acknowledgment ACK packets before validating them. A remote attacker could exploit this vulnerability by sending network packets with outdated ACK numbers,...

EUVD-2026-95992

Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through /console-api/workflow/code/run and /workflow/v1/run selects LocalExecutor in core/workflow/engine/nodes/code/codenode.py when CODEEXECTYPE is not explicitly...

CVE-2026-77411

RabbitMQ amqp091-go versions before 1.13.0 mishandle an oversized AMQP longstr field. A malicious or compromised broker can desynchronize message parsing, causing subsequent bytes to be interpreted as AMQP data and disrupting connection integrity or availability. Fixed in version 1.13.0. Mitigati...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...

CVE-2026-93860

In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of assigned role, can read and change the service's cluster-wide maintenanc...

kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink

A flaw was found in the Linux kernel's IP Generic Routing Encapsulation ipgre component. This vulnerability allows a local attacker with network administration capabilities in one network namespace to modify a tunnel residing in a different network namespace where they lack privileges. This is du...