SUSE-SU-2026:3959-1 Security update for cpio

This update for cpio fixes the following issues: - CVE-2026-66484: path traversal allows creating hard links outside intended directory via malicious tar archives bsc1274856. - CVE-2026-66485: denial of service via uncontrolled memory allocation from crafted archives bsc1274857. - CVE-2026-66486:...

Security update for cpio

This update for cpio fixes the following issues: CVE-2026-66484: path traversal allows creating hard links outside intended directory via malicious tar archives bsc1274856. CVE-2026-66485: denial of service via uncontrolled memory allocation from crafted archives bsc1274857. CVE-2026-66486:...

org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service due to excessive allocation

A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit a vulnerability in how the software handles type sizes and counts. This could lead to excessive memory allocation, causing the system to become unresponsive and resulting in a denial of...

org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service due to excessive allocation

A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit a vulnerability in how the software handles type sizes and counts. This could lead to excessive memory allocation, causing the system to become unresponsive and resulting in a denial of...

CVE-2026-80744

CVE-2026-80744 affects the Linux kernel (reproduced on 5.10 stable , present in mainline) in the nf_tables_offload component (net/netfilter/nf_tables_offload.c). In nft_flow_rule_offload_abort(), a WARN_ON_ONCE(err) fires during nf_tables transaction rollback when a memory allocation fails with -...

EUVD-2026-70293

A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shellexec of the file crates/openfang-runtime/src/toolrunner.rs. This manipulation causes uncontrolled memory allocation. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-84888

A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shellexec of the file crates/openfang-runtime/src/toolrunner.rs. This manipulation causes uncontrolled memory allocation. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-85445: Memory Allocation with Excessive Size Value

MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket function that trusts the packet count declared in mux headers without validation. Attackers can declare arbitrarily large packet counts to trigger unbounded memory allocation, exhausting system resourc...

PT-2026-85294

Name of the Vulnerable Software and Affected Versions MOOS-IvP versions prior to 24.8.2 Description A denial of service issue exists in the Demuxer::addMuxPacket function. The system trusts the packet count declared in mux headers without proper validation, allowing attackers to specify arbitrari...

Linux Distros Unpatched Vulnerability : CVE-2026-84382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in src/httpx2/httpx2/decoders.py fully inflate each gzip,...

CVE-2026-84888: Memory Allocation with Excessive Size Value

A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shellexec of the file crates/openfang-runtime/src/toolrunner.rs. This manipulation causes uncontrolled memory allocation. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-84888

RightNow-AI OpenFang up to version 0.6.9 contains a vulnerability in the shell_exec function within crates/openfang-runtime/src/tool_runner.rs. The flaw causes uncontrolled memory allocation , exploitable remotely with low privileges and no user interaction. The primary impact is low availability...

CVE-2026-84888 RightNow-AI OpenFang tool_runner.rs shell_exec memory allocation

A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shellexec of the file crates/openfang-runtime/src/toolrunner.rs. This manipulation causes uncontrolled memory allocation. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-84888 RightNow-AI OpenFang tool_runner.rs shell_exec memory allocation

A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shellexec of the file crates/openfang-runtime/src/toolrunner.rs. This manipulation causes uncontrolled memory allocation. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-84857

A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the file src/serve.rs of the component API Endpoint. This manipulation causes uncontrolled memory allocation. The attack can be initiated remotely. The exploit has been published and may be used. The vendor...

CVE-2026-84857 sigoden aichat API Endpoint serve.rs memory allocation

A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the file src/serve.rs of the component API Endpoint. This manipulation causes uncontrolled memory allocation. The attack can be initiated remotely. The exploit has been published and may be used. The vendor...

EUVD-2026-70279

A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the file src/serve.rs of the component API Endpoint. This manipulation causes uncontrolled memory allocation. The attack can be initiated remotely. The exploit has been published and may be used. The vendor...

CVE-2026-84857 sigoden aichat API Endpoint serve.rs memory allocation

A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the file src/serve.rs of the component API Endpoint. This manipulation causes uncontrolled memory allocation. The attack can be initiated remotely. The exploit has been published and may be used. The vendor...

CVE-2026-84857

sigoden aichat (versions up to 0.30.4) is affected by an uncontrolled memory allocation flaw in the API Endpoint component, specifically in the file src/serve.rs. The root cause is linked to request body handling, as indicated by the published report titled AIChat_Serve_Request_Body_DoS_Report . ...

CVE-2026-78586

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user with low-level privileges could submit a specially crafted request that causes Kibana to consume an unbounded amount of memory, renderin...