CVE-2026-86349

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.8, 10.11.x = 10.11.22 fail to limit the nesting depth in the server-side Markdown parser which allows an authenticated attacker to cause a denial of service CPU resource exhaustion via a crafted post containing deeply nested...

CVE-2026-86349 Mattermost Server Algorithmic DoS via Unbounded Markdown Block Nesting

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.8, 10.11.x = 10.11.22 fail to limit the nesting depth in the server-side Markdown parser which allows an authenticated attacker to cause a denial of service CPU resource exhaustion via a crafted post containing deeply nested...

EUVD-2026-77480

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.8, 10.11.x = 10.11.22 fail to limit the nesting depth in the server-side Markdown parser which allows an authenticated attacker to cause a denial of service CPU resource exhaustion via a crafted post containing deeply nested...

CVE-2026-86349 Mattermost Server Algorithmic DoS via Unbounded Markdown Block Nesting

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.8, 10.11.x = 10.11.22 fail to limit the nesting depth in the server-side Markdown parser which allows an authenticated attacker to cause a denial of service CPU resource exhaustion via a crafted post containing deeply nested...

Security Bulletin: IBM MQ queue manager is vulnerable to denial of service (CVE-2026-12150)

Summary IBM MQ has addressed an unbounded recursion vulnerability in the queue manager's TLS certificate parser that could allow a remote unauthenticated attacker with a valid TLS certificate to cause a denial of service Vulnerability Details CVEID:CVE-2026-12150 DESCRIPTION: IBM MQ could allow a...

CVE-2026-90715

A security vulnerability has been detected in marcobambini Gravity up to 0.9.7. This affects an unknown function of the file src/utils/gravityjson.c of the component udp json-parser. Such manipulation leads to integer overflow. The attack may be performed from remote. The exploit has been disclos...

CVE-2026-90716

A vulnerability was detected in marcobambini Gravity up to 0.9.7. This impacts the function parsenumberexpression of the file src/compiler/gravityparser.c of the component Number Parser. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

CVE-2026-90714

A weakness has been identified in marcobambini Gravity up to 0.9.7. The impacted element is an unknown function of the file src/utils/gravityjson.c of the component JSON parser. This manipulation causes memory corruption. The attack is possible to be carried out remotely. The exploit has been mad...

CVE-2026-90716

An out-of-bounds read in the Number Parser component of marcobambini Gravity (up to 0.9.7) affects the function parse_number_expression in src/compiler/gravity_parser.c. The vulnerability can be triggered remotely with low privileges and passive user interaction, resulting in low impact to confid...

CVE-2026-90716 marcobambini Gravity Number gravity_parser.c parse_number_expression out-of-bounds

A vulnerability was detected in marcobambini Gravity up to 0.9.7. This impacts the function parsenumberexpression of the file src/compiler/gravityparser.c of the component Number Parser. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

CVE-2026-90716 marcobambini Gravity Number gravity_parser.c parse_number_expression out-of-bounds

A vulnerability was detected in marcobambini Gravity up to 0.9.7. This impacts the function parsenumberexpression of the file src/compiler/gravityparser.c of the component Number Parser. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

CVE-2026-90716 marcobambini Gravity Number gravity_parser.c parse_number_expression out-of-bounds

A vulnerability was detected in marcobambini Gravity up to 0.9.7. This impacts the function parsenumberexpression of the file src/compiler/gravityparser.c of the component Number Parser. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

EUVD-2026-77443

A vulnerability was detected in marcobambini Gravity up to 0.9.7. This impacts the function parsenumberexpression of the file src/compiler/gravityparser.c of the component Number Parser. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

Astra Linux – Vulnerability in CGal

There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could result in code execution. An attacker can provide malicious input to trigger...

Astra Linux – Vulnerability in CGal

There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could result in code execution. An attacker can provide malicious input to trigger...

Astra Linux – Vulnerability in Ruby-Rack

Rack is a modular Ruby web server interface. In versions 3.0.0.beta1 through 3.1.21, and from 3.2.0 through 3.2.6, Rack::Multipart::Parserhandlemimehead parsed quoted multipart parameters such as Content-Disposition: form-data; name="..." using repeated Stringindex searches combined with...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the HTML parser in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass XSS protections through a crafted HTML page. Chrome security severity: Medium...

Astra Linux – Vulnerability in CGal

There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could result in code execution. An attacker can provide malicious input to trigger...

Astra Linux – Vulnerability in CGal

There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could result in code execution. An attacker can provide malicious input to trigger...

Astra Linux – Vulnerability in yaml-cpp

The SingleDocParser::HandleNode function in yaml-cpp also known as LibYaml-C++ 0.5.3 allows remote attackers to cause a denial of service resource consumption and application crash through a crafted YAML file...