CVE-2026-47859 Unbounded memory allocation in RFC6587SyslogDeserializer (octet-counted framing) — remote DoS

RFC6587SyslogDeserializer, used by the Spring Integration syslog TCP inbound adapter to decode RFC 6587 / RFC 5424 frames, trusts the sender-supplied octet count of an octet-counted frame and allocates a byte array of exactly that size with no upper bound. Spring Integration 7.1.0 Spring...

CVE-2026-19401

NSD (Name Server Daemon) is vulnerable to a remote UDP denial-of-service targeting its serve child process. An unauthenticated remote attacker can crash the serve child by sending a crafted UDP message containing a specially tuned number of DNS Cookie options (17 when the UDP payload size is 512)...

PT-2026-81986

Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query. By continuously crashing the serve childs, the remote client can denial all TCP service to this NSD instance...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104804)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104804 advisory. In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt- provider-cert:' files than there are matching...

CVE-2026-80186 Bluez: stack overflow in name2utf8 causes dos and potential code execution

A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response EIR packet that causes a buffer overflow when the target device performs Bluetooth discovery. This...

CVE-2026-13217

The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocppprocessservermsg the code calls atoistrtokruid, "-", &tmp without checking the strtokr return value. When the server-supplied uid is empty or contains no -...

EUVD-2026-65598

The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocppprocessservermsg the code calls atoistrtokruid, "-", &tmp without checking the strtokr return value. When the server-supplied uid is empty or contains no -...

CVE-2026-13217 NULL-pointer dereference in Zephyr OCPP CALLRESULT parsing via unchecked strtok_r/atoi

The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocppprocessservermsg the code calls atoistrtokruid, "-", &tmp without checking the strtokr return value. When the server-supplied uid is empty or contains no -...

CVE-2026-13217 NULL-pointer dereference in Zephyr OCPP CALLRESULT parsing via unchecked strtok_r/atoi

The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocppprocessservermsg the code calls atoistrtokruid, "-", &tmp without checking the strtokr return value. When the server-supplied uid is empty or contains no -...

ALPINE-CVE-2026-54874

Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large...

PT-2026-81375

The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocpp process server msg the code calls atoistrtok ruid, "-", &tmp without checking the strtok r return value. When the server-supplied uid is empty or contains...

CVE-2026-13217: NULL Pointer Dereference

The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocppprocessservermsg the code calls atoistrtokruid, "-", &tmp without checking the strtokr return value. When the server-supplied uid is empty or contains no -...

EulerOS Virtualization 2.13.1 : krb5 (EulerOS-SA-2026-3177)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is a NULL pointer dereference if an application calls gssacceptseccontext on a system...

OpenSSL 1.1.1 < 1.1.1zi Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.1.1zi. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.1.1zi advisory. - Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more...

PT-2026-93890

Name of the Vulnerable Software and Affected Versions Wire versions prior to 6.4.5 Wire versions prior to 7.0.0-alpha04 Description An integer overflow exists in the protobuf and gRPC decoder. Protobuf readers fail to consistently validate attacker-controlled lengths against the logical message...

ROS-20260825-73-0003

The vulnerability of the rfkillgpioacpiprobe function in the net/rfkill/rfkill-gpio.c module, which implements networking functions of the Linux kernel, relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...

The vulnerability of the qixis_cpld gpio_probe() function in the drivers/gpio/gpio-qixis-fpga.c driver module of the Linux operating system’s GPIO kernel allows a hacker to cause a service failure.

The vulnerability of the qixiscpld gpioprobe function in the drivers/gpio/gpio-qixis-fpga.c driver module of the Linux operating system’s GPIO driver is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the `parse_redboot_partitions()` function in the `drivers/mtd/parsers/redboot.c` file of the MTD memory driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the parseredbootpartitions function in the drivers/mtd/parsers/redboot.c file of the MTD memory driver in the Linux operating system is related to the copying of buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerability could allow an...

The vulnerability of the mpfs_sys_controller_probe() function in the drivers/soc/microchip/mpfs-sys-controller.c file of the SOC kernel driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mpfssyscontrollerprobe function in the drivers/soc/microchip/mpfs-sys-controller.c file of the Linux operating system’s SOC System on Chip kernel module is related to improper memory release. Exploitation of this vulnerability can allow a remote attacker to cause a servic...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a hacker to trigger a service failure.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause a system failure...