CVE-2026-73214

A flaw was found in coturn. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service DoS by sending specially crafted fragmented ClientHello messages. The coturn server retains OpenSSL Datagram Transport Layer Security DTLS session state for these messages before...

CVE-2026-32708

CVE-2026-32708 affects the PX4 Autopilot’s Zenoh uORB subscriber. Before 1.17.0-rc2, it allocates a stack VLQuestion from the incoming payload length without bounds, enabling a remote Zenoh publisher to send an oversized, fragmented message that triggers an unbounded stack allocation and a stack ...