The vulnerability of the golang-x-net package, a programming language for Golang, arises from insufficient resource management during its existence. This allows attackers to trigger a service failure.

The vulnerability of the golang-x-net package, a programming language, is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013153)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013153 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: fix missing sevdecommission in sevreceivestart DECOMMISSION the current SEV context if...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010920)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010920 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential memory leaks When the driver hits -ENOMEM at allocating a URB or a...

PT-2026-33926

This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing brute force attacks against administrative...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-010797)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010797 advisory. In the Linux kernel, the following vulnerability has been resolved: most: usb: fix double free on late probe failure The MOST subsystem has a non-standard registrati...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013064)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013064 advisory. In the Linux kernel, the following vulnerability has been resolved: most: usb: fix double free on late probe failure The MOST subsystem has a non-standard registrati...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013083)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013083 advisory. In the Linux kernel, the following vulnerability has been resolved: udptunnel: use netdevwarn instead of netdevWARN netdevWARN uses WARN/WARNON to print a backtrace...

CVE-2026-35554

A flaw was found in the Apache Kafka Java producer client. A race condition in the client's buffer pool management can cause messages to be silently delivered to incorrect topics. This occurs when a message batch expires while its network request is still active, leading to premature buffer...

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

The vulnerability of the Microsoft.NET Framework, related to synchronization errors when using shared resources, allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft.NET Framework is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the endpoint of the M-Files Server API for document automation allows a perpetrator to trigger a service failure.

The vulnerability of the endpoint API of the M-Files Server automation platform for document processing is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the libp2p-rust library server allows a hacker to trigger a service failure.

The vulnerability of the libp2p-rust library server is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Pillow image processing library, related to unlimited resource distribution, allows a hacker to cause a service failure.

The vulnerability of the Pillow image processing library is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

False Security Confidence in Benign LLM Code Generation

Prior work has demonstrated that functionally correct yet vulnerable outputs arise systematically in threat-oriented settings, where adversarial or implicit channels are used to induce security failures in code agents and automated patching workflows. This note introduces a complementary but...

The vulnerability of the jq JSON processing tool lies in the use of a hash function that does not meet security requirements. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of the jq JSON processing tool lies in the use of a hash function that does not meet security requirements. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to cause system failures.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the ColdFusion software platform, related to uncontrolled resource consumption, allows attackers to cause service failures for the application.

The vulnerability of the ColdFusion software platform is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures for the application...

CVE-2026-35040

fast-jwt provides fast JSON Web Token JWT implementation. Prior to 6.2.1, using certain modifiers on RegExp objects in the allowedAud, allowedIss, allowedSub, allowedJti, or allowedNonce options in verify functions can cause certain unintended behaviours. This is because some modifiers are statef...

The vulnerability of the ssh_get_hexa() function in the application programming interface of the libssh library, which allows a hacker to cause a service failure

The vulnerability of the sshgethexa function in the application programming interface of the libssh library is related to a breach of the buffer boundary. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

The vulnerability of the ASN.1 library pyasn1 in the Python programming language, related to unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the ASN.1 library pyasn1 in the Python programming language is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...