Lucene search
K

10 matches found

CVE
CVE
added 2026/06/17 8:5 p.m.24 views

CVE-2026-32682

The CVE-2026-32682 entry concerns NGINX Gateway Fabric. The vulnerability arises when GRPCRoutes are configured; an authenticated user with permission to create or modify GRPCRoute resources can cause the control plane to terminate by sending undisclosed GRPCRoute configurations containing backen...

7.1CVSS5.5AI score0.00292EPSS
Exploits0References1Affected Software1
F5 Networks
F5 Networks
added 2026/06/17 7:45 p.m.11 views

K000161786: NGINX Gateway Fabric vulnerability CVE-2026-32682

Security Advisory Description When NGINX Gateway Fabric is configured using GRPCRoutes, an authenticated, remote attacker with permission to create or modify GRPCRoute resources can cause the NGINX Gateway Fabric control plane to terminate by sending undisclosed GRPCRoute configurations containin...

7.1CVSS5.3AI score0.00292EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2026/06/17 12:0 a.m.18 views

PT-2026-50533

Name of the Vulnerable Software and Affected Versions NGINX Gateway Fabric affected versions not specified Description When configured using GRPCRoutes, an authenticated remote attacker with permissions to create or modify GRPCRoute resources can cause the control plane to terminate. This occurs ...

7.1CVSS5.9AI score0.00292EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/12/18 12:0 a.m.23 views

CVE-2025-65564

A denial-of-service vulnerability exists in the omec-upf upf-epc-pfcpiface in version upf-epc-pfcpiface:2.1.3-dev. When the UPF receives a PFCP Association Setup Request that is missing the mandatory Recovery Time Stamp Information Element, the association setup handler dereferences a nil pointer...

0.0036EPSS
Exploits1References2
Wired Threat Level
Wired Threat Level
added 2023/09/05 3:49 p.m.21 views

The Strange Afterlife of Wagner’s Yevgeny Prigozhin

Posts praising the Wagner Group boss following his death in a mysterious plane crash last month indicate he was still in control of his "troll farm," researchers claim...

7AI score
Exploits0
Wired Threat Level
Wired Threat Level
added 2023/08/24 4:22 p.m.19 views

The Last Hour Before Yevgeny Prigozhin's Plane Crash

Russia tightly controls its information space—making it hard to get accurate information out of the country. But open source data provides some clues about the crash...

6.8AI score
Exploits0
Vulnrichment
Vulnrichment
added 2022/10/13 12:0 a.m.6 views

CVE-2022-39278 Istio vulnerable to denial of service attack due to Golang Regex Library

Istio is an open platform-independent service mesh that provides traffic management, policy enforcement, and telemetry collection. Prior to versions 1.15.2, 1.14.5, and 1.13.9, the Istio control plane, istiod, is vulnerable to a request processing error, allowing a malicious attacker that sends a...

7.5CVSS7.5AI score0.01063EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/03/09 12:0 a.m.5 views

Istio 资源管理错误漏洞

Istio is an open platform for connecting, managing, and securing microservices. Istio suffers from a resource management error vulnerability that allows a malicious attacker to send a specially crafted message that could cause a control plane crash when the cluster's authentication webhook is...

7.5CVSS7.3AI score0.01529EPSS
Exploits0References7
Veracode
Veracode
added 2022/02/23 11:32 a.m.25 views

Denial Of Service (DoS)

github.com/istio/istio is vulnerable to denial of service DoS attacks. A malicious user is able to send a specifically crafted message causing a request processing error resulting a control plane crash...

7.5CVSS2.8AI score0.01625EPSS
Exploits0References9Affected Software2
CNVD
CNVD
added 2021/12/23 12:0 a.m.1 views

Open5Gs Input Validation Error Vulnerability

pen5Gs is a C open source implementation of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS has a security vulnerability that can be exploited by an attacker to cause SGW-U/UPF to crash...

7.5CVSS6.9AI score0.04405EPSS
Exploits0References1
Rows per page
Query Builder