PT-2026-110150

🚨 CVE-2026-108748 Quarkus LangChain4j 1.9.0 through 1.14.1 contains a missing release of memory vulnerability in the chat-scopes WebSocket / chat/routes endpoint that allows unauthenticated remote clients to exhaust server memory. Attackers can send repeated CONNECT frames reusing one chatId,...

CVE-2026-108714: Allocation of Resources Without Limits or Throttling

MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory because Application.mcpWebSocket installs Ktor WebSockets without a maxFrameSize limit. Attackers can send small frame headers declaring payloads near 2 GiB...

CVE-2026-108859: Allocation of Resources Without Limits or Throttling

mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote unauthenticated attackers to exhaust memory by sending oversized POST bodies. Attackers can send arbitrarily large or many concurrent POST requests, read fully via io.ReadAll befor...

PT-2026-110152

Name of the Vulnerable Software and Affected Versions OpenDocMan versions 2.4.0 through 2.10.0 Description Authenticated users can cause a denial of service by uploading specially crafted office documents ODT, DOCX, or XLSX. These files utilize a decompression bomb technique, where small XML...

CVE-2026-14854: Uncontrolled Resource Consumption

The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to exhaust server memory and cause a Denial of Service with a single request...

CVE-2026-19740: Missing Release of Memory after Effective Lifetime

The Link Layer Control Procedure LLCP implementation of the Zephyr software Bluetooth LE Controller retains the receive node that carried an accepted LLPHYUPDATEIND so that it can later be reused for the host notification when the update instant is reached llcprxnoderetain in...

PT-2026-110186

Name of the Vulnerable Software and Affected Versions zhayujie CowAgent versions prior to 2.2.0 Description A remote attack can be launched against the Media Download Handler component. An unknown function within this component allows for uncontrolled memory allocation, which occurs when the syst...

CVE-2026-108755: Allocation of Resources Without Limits or Throttling

Hatchet through 0.110.5 contains an allocation of resources without limits vulnerability that allows unauthenticated attackers to exhaust memory via the SNS ingestion endpoint. Attackers can send arbitrarily large or concurrent request bodies to POST /api/v1/sns/tenant/event with any UUID, which...

CVE-2026-19739: Missing Release of Memory after Effective Lifetime

The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/llsw/ullllcpconnupd.c retains the received RX node while a Connection Update / Connection Parameter procedure waits for its instant, so the node can later carry the host notification llcprxnoderetain, which marks it...

CVE-2026-108750: Improper Handling of Highly Compressed Data (Data Amplification)

OpenDocMan 2.4.0 through 2.10.0 contains a decompression bomb vulnerability that allows authenticated users to exhaust PHP memory by uploading crafted office documents. Attackers can upload a small ODT, DOCX, or XLSX file whose XML entries decompress to hundreds of megabytes, crashing PHP workers...

CVE-2026-19736: Out-of-bounds Write

The NXP MCUX TRNG entropy driver in drivers/entropy/entropymcuxtrng.c passed the caller's byte count straight to the vendor SDK routine TRNGGetRandomData. On i.MX RT5xx and RT6xx parts the SDK compiles its TRNGSWHEALTHTESTS variant, which always copies whole 32-bit words and draws entropy rounded...

CVE-2026-108683: Memory Allocation with Excessive Size Value

A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Media Download Handler. Such manipulation leads to uncontrolled memory allocation. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2026-108748: Missing Release of Memory after Effective Lifetime

Quarkus LangChain4j 1.9.0 through 1.14.1 contains a missing release of memory vulnerability in the chat-scopes WebSocket /chat/routes endpoint that allows unauthenticated remote clients to exhaust server memory. Attackers can send repeated CONNECT frames reusing one chatId, leaving orphaned scope...

PT-2026-110117

Name of the Vulnerable Software and Affected Versions MCP Kotlin SDK versions prior to 0.15.1 Description An uncontrolled memory allocation issue exists because Application.mcpWebSocket installs Ktor WebSockets without a maxFrameSize limit. Remote clients can exploit this by sending small frame...

CVE-2026-19738: Missing Release of Memory after Effective Lifetime

The Bluetooth Link Layer Control Procedure LLCP implementation for Connected Isochronous Stream CIS creation retains an RX node ctx-noderef.rx, marked NODERXTYPERETAIN so it can later be reused as the host notification — on the peripheral while awaiting the Host's reply to an LLCISREQ, and on the...

CVE-2026-108749: Missing Authentication for Critical Function

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-98285

A flaw was found in the Linux kernel's network bridge component. When removing Virtual Local Area Network VLAN configurations, errors returned by hardware offload devices prevent the kernel from completing software cleanup. A local user could exploit this vulnerability to trigger memory leaks or ...

CVE-2026-97853

Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision 34 digits by default is applied, so its cost grows with the places argument instead ...

CVE-2026-97853 Unbounded allocation in decimal Decimal.round/3 driven by the places argument enables DoS

Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision 34 digits by default is applied, so its cost grows with the places argument instead ...

CVE-2026-97853

Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision 34 digits by default is applied, so its cost grows with the places argument instead ...