CVE-2026-98710

A flaw was found in the Linux kernel's iwlegacy wireless driver. The driver fails to release memory allocated for device configuration data when a wireless network device is removed from the system. A local user could exploit this vulnerability by repeatedly triggering device disconnection or...

CVE-2026-115417

Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of the client application. To remediate this issue, users should upgrade to aws-c-mqtt 0.16.2 or later, or to an AWS Common...

CVE-2026-115327

A flaw was found in libyang. An uninitialized pointer free vulnerability occurs during the processing of Network Configuration Protocol NETCONF Remote Procedure Call RPC action envelopes. An authenticated remote attacker with an established NETCONF session can trigger this flaw by sending a...

CVE-2026-94440

A flaw was found in the mime/multipart and net/textproto packages in Go. A remote attacker could exploit this vulnerability by submitting a crafted multipart form request that bypasses configured memory limits when the remaining boundary limit is small. This issue allows the application to read a...

CVE-2026-98083

A flaw was found in the Linux kernel's Btrfs file system. An improper error-handling sequence during RAID stripe extent insertion can prematurely release transaction objects if memory allocation fails. A local user could exploit this flaw to trigger a use-after-free condition, leading to a system...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell ██████╗ ██╗ ██╗██████╗ ██████╗ ███████╗██╗...

CVE-2026-98719

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for AMD SEV Secure Encrypted Virtualization. This vulnerability occurs due to a double-free issue when memory allocated during virtual machine initialization is freed twice following an initialization failure. A loc...

CVE-2026-98724

A flaw was found in the Linux kernel's Non-Volatile Memory Express NVMe target PCI endpoint function driver. When processing a Scatter-Gather List SGL segment whose length is shorter than a single descriptor, the system fails to properly validate the segment size. A connected host can exploit thi...

Security Bulletin: Multiple Security Vulnerabilities in Netty affect IBM Sterling B2B Integrator and IBM Sterling File Gateway

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed these security vulnerabilities Vulnerability Details CVEID:CVE-2026-59902 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final,...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-guard Defensive audit & hardening toolkit for CVE...

CVE-2026-115417 Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt

Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of the client application. To remediate this issue, users should upgrade to aws-c-mqtt 0.16.2 or later, or to an AWS Common...

CVE-2026-115417

A memory allocation vulnerability exists in the MQTT 3.1.1 compatibility adapter within aws-c-mqtt prior to version 0.16.2 . The issue stems from a memory allocation with an excessive size value , which could allow a remote actor to trigger a denial of service (DoS) against the client application...

EUVD-2026-108508

Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of the client application. To remediate this issue, users should upgrade to aws-c-mqtt 0.16.2 or later, or to an AWS Common...

CVE-2026-115417

Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of the client application. To remediate this issue, users should upgrade to aws-c-mqtt 0.16.2 or later, or to an AWS Common...

CVE-2026-115417 Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt

Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of the client application. To remediate this issue, users should upgrade to aws-c-mqtt 0.16.2 or later, or to an AWS Common...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Uncontrolled Resource Consumption issues in FasterXML jackson-databind

Summary IBM Watson Speech Services Cartridge is vulnerable to Uncontrolled Resource Consumption issues in FasterXML jackson-databind. FasterXML jackson-databind is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below...

CVE-2026-75508

A flaw was found in graphql-core. The parser's token limit improperly tracks only non-comment tokens while continuing to allocate and retain memory for skipped comments. An unauthenticated remote attacker could exploit this vulnerability by submitting a specially crafted, comment-padded GraphQL...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to DoS and injection issues in Micrometer (CVE-2026-59295, CVE-2026-59296)

Summary BM Watson Speech Services Cartridge is vulnerable to DoS and injection issues in Micrometer. Micrometer is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-59295 DESCRIPTION: It...

CVE-2026-79610

A flaw was found in Xen. When a guest virtual machine repeatedly changes grant table configurations, the hypervisor frees and reallocates status memory pages, rendering previously calculated pointers invalid. A malicious guest can exploit these stale pointers to corrupt hypervisor memory,...

CVE-2026-25290

A flaw was found in OOBM. An integer overflow or wraparound vulnerability exists when validating large data buffers from external sources. This flaw occurs due to improper addition used to check buffer length, which can lead to memory corruption. A local attacker could exploit this to achieve...