EUVD-2026-95317

Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity vulnerability. An authenticated user with Viewer privileges could submit crafted search input that causes excessive processing, potentially degrading the availability of the application...

CVE-2026-104628 Satel Netco Design Inefficient Regular Expression Complexity

Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity vulnerability. An authenticated user with Viewer privileges could submit crafted search input that causes excessive processing, potentially degrading the availability of the application...

CVE-2026-104628

Satel Netco Design versions prior to v2.1.7 are vulnerable to an inefficient regular expression complexity vulnerability (CWE-1333). An authenticated user with Viewer privileges can submit specially crafted search input that triggers excessive processing. This flaw can lead to a degradation of th...

CVE-2026-76271

In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause a denial of service against a Representational State Transfer REST API endpoint in the Discover Splunk Observability Cloud app. The vulnerabili...

CVE-2026-76271 Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk Enterprise

In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause a denial of service against a Representational State Transfer REST API endpoint in the Discover Splunk Observability Cloud app. The vulnerabili...

CVE-2026-76271

The Discover Splunk Observability Cloud app for Splunk Enterprise is vulnerable to a Denial of Service (DoS) condition in versions below 10.4.3 , 10.2.7 , and 10.0.10 (note: 9.4.x is not affected). A low-privileged user without "admin" or "power" roles can exploit the issue by submitting input to...

CVE-2026-96292

Inefficient regular expression complexity, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

Linux Distros Unpatched Vulnerability : CVE-2026-96292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inefficient regular expression complexity, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift:...

PT-2026-104216

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift Lua bindings contain an inefficient regular expression complexity and inefficient algorithmic complexity issue. This can lead to performance degradation or resource exhaustion wh...

Security Bulletin: Vulnerability in brace-expansion affect IBM Cloud Pak System [CVE-2025-5889]

Summary A vulnerability was found in juliangruber brace-expansion affect IBM Cloud Pak System. The vulnerability was addressed in Cloud Pak System. Vulnerability Details CVEID:CVE-2025-5889 DESCRIPTION: A vulnerability was found in juliangruber brace-expansion up to 1.1.11/2.0.1/3.0.0/4.0.0. It h...

CVE-2026-102473: Inefficient Regular Expression Complexity

A flaw was found in dash. When built without libc fnmatch, the internal pmatch matcher implements by unbounded recursion over candidate positions. A local user who can plant filenames, or otherwise feed that matcher, can make a short multi-star pattern such as .....tar.gz consume excessive CPU...

Exploit for Inefficient Regular Expression Complexity in Kjd Internationalized_Domain_Names_In_Applications

Domain Validation Service — CVE-2024-3651 Demo A Python Flask...

CVE-2026-93761: Inefficient Regular Expression Complexity

An inefficient regular expression complexity issue in the in-memory query evaluation component of the Mongoid library may allow an unauthenticated party to cause excessive processing within an embedding application process. Applications that place user-supplied text into a pattern-matching query...

CVE-2026-92114: Inefficient Regular Expression Complexity

A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/webcore/src/v09/basiccatalog/functions/saferegex.ts of the component Basic Catalog. Such manipulation leads to inefficient regular expression complexity. The attack can be...

CVE-2026-75880: Inefficient Regular Expression Complexity

An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results in excessive evaluation during message delivery attempts, occupying a shared broker thread and leading to denial of service. This issue affects Apache Artemis: from 2.50.0 through 2.56.0...

CVE-2026-85062: Inefficient Regular Expression Complexity

Colord is a tiny yet powerful tool for high-performance color manipulations and conversions. Prior to 2.9.4, synchronous CSS color string matchers in src/colorModels/rgbString.ts, src/colorModels/hslString.ts, src/colorModels/hwbString.ts, src/colorModels/lchString.ts, and...

CVE-2026-59893: Inefficient Regular Expression Complexity

sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, SQLREGEX in sqlparse/keywords.py and the per-position loop in sqlparse/lexer.py repeatedly scan unmatched dollar-quoted literal and multiline-comment delimiters, causing quadratic CPU consumption through sqlparse.parse,...

CVE-2026-68749: Inefficient Regular Expression Complexity

Inefficient Regular Expression Complexity vulnerability in the CSS scrubber in rrrene htmlsanitizeex allows an unauthenticated remote attacker to exhaust server CPU via a long CSS declaration in sanitized HTML. The declaration regex in HtmlSanitizeEx.Scrubber.CSS.scrub/1 matches the property name...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a D.o.S. in IDNA [CVE-2026-45409]

Summary IBM Watson Speech Services Cartridge is vulnerable to a D.o.S. in IDNA, due to an Inefficient Regular Expression Complexity issue CVE-2026-45409. IDNA is used in our speech runtimes. This vulnerability has been addressed. Please read the details for remediation below. Vulnerability Detail...

CVE-2026-16270: Inefficient Regular Expression Complexity

Open Mercato does not validate regex rules. An attacker with privileges to create the regex rule can add an unsafe regex to a field. When someone provide the proper string it can result in a DoS attack. This issue was fixed in version 0.6.4...