PT-2026-60600

Name of the Vulnerable Software and Affected Versions Quicly versions prior to commit dccf5d4 Description Quicly, an IETF QUIC protocol implementation used primarily in the H2O HTTP server, is susceptible to stateless reset injection due to insufficient packet entry validation. While the QUIC...

CVE-2026-44436: Buffer Copy without Checking Size of Input

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b178e6, Quicly is vulnerable to a Denial of Service attack through connection state corruption. In QUIC Invariants, the maximum length of a Connection ID is 255 bytes, while QUIC...

PT-2026-60601

Name of the Vulnerable Software and Affected Versions Quicly versions prior to commit 937d0e9 Description An assertion failure occurs when the total number of valid handshake messages received over a CRYPTO stream of a single packet number space exceeds 32KB. This leads to a Denial of Service,...

PT-2026-60503

Name of the Vulnerable Software and Affected Versions Yamcs versions prior to 5.12.8 Yamcs versions prior to 5.13.2 Description The PacketsApi.exportPackets endpoint in yamcs-core/src/main/java/org/yamcs/http/api/PacketsApi.java fails to enforce object-level ReadPacket privileges when a request...

JLSEC-2026-765 Remote packet capture support is disabled by default in libpcap

Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcapfindalldevsex. One of the function arguments can be a filesystem path, which normally means a directory with...

AlmaLinux 10 : corosync (ALSA-2026:19043)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:19043 advisory. corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet CVE-2026-35091 corosync: Corosync: Denial of Service via integer...

CVE-2026-51807

Heap-based out-of-bounds write in j2kprecinctsubband::parsepacketheader in OpenHTJ2K versions 0.18.3 and earlier fixed in v0.18.4 caused by missing bounds validation before coding-pass lengths are written to j2kcodeblock::passlength128. A crafted JPEG 2000 codestream containing malformed PPM pack...

JLSEC-2026-680 Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an...

Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the correct length...

JLSEC-2026-692 Integer underflow in wolfSSL packet sniffer <= 5.8.4 allows an attacker to cause a buffer overflow...

Integer underflow in wolfSSL packet sniffer = 5.8.4 allows an attacker to cause a buffer overflow in the AEAD decryption path by injecting a TLS record shorter than the explicit IV plus authentication tag into traffic inspected by sslDecodePacket. The underflow wraps a 16-bit length to a large...

JLSEC-2026-741 Integer underflow in wolfSSL packet sniffer <= 5.9.0 allows an attacker to cause a program crash in...

Integer underflow in wolfSSL packet sniffer = 5.9.0 allows an attacker to cause a program crash in the AEAD decryption path by injecting a TLS record shorter than the explicit IV plus authentication tag into traffic inspected by sslDecodePacket. The underflow wraps a 16-bit length to a large valu...

EUVD-2026-44064

Windows Quality of Service QoS Packet Scheduler Information Disclosure Vulnerability...

CVE-2026-50431

Windows Quality of Service QoS Packet Scheduler Information Disclosure Vulnerability...

CVE-2026-50431

Technical details are not publicly available in the provided documents. Monitor updates from Microsoft (MSRC) and advisories (NCSC, ZDI) for affected products, impact, and remediation related to CVE-2026-50431.

CVE-2026-50431 Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability

...

CVE-2026-50431 Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability

...

CVE-2026-9653

A denial-of-service security issue exists across all the 1756-EN2, EN3, and ENBT communication module due to improper validation of CIP Implicit Connection packets. An attacker on the network can exploit this by sending crafted packets to continuously disrupt device connections, though device...

CVE-2026-12659 Rockwell Automation Flex 5000® Adapter - Denial of Service

A denial-of-service security issue exists in the affected products. The security issue stems from improper handling of exceptional conditions when processing crafted CIP packets sent to the adapter. A power cycle is required to recover the module and associated I/O...

Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability

...

CVE-2026-51807

OpenHTJ2K versions 0.18.3 and earlier (fixed in v0.18.4 ) are vulnerable to a heap-based out-of-bounds write in the j2k_precinct_subband::parse_packet_header() function. The root cause is a missing bounds validation before coding-pass lengths are written to the j2k_codeblock::pass_length[128] arr...

PT-2026-58410

Name of the Vulnerable Software and Affected Versions Windows Quality of Service QoS Packet Scheduler affected versions not specified Description An information disclosure issue exists in the Windows Quality of Service QoS Packet Scheduler, which could allow an attacker to obtain sensitive...