CVE-2026-102483

The ntpsec ntpd software (versions 1.1.4 through 1.2.5 ) is vulnerable to a Reachable Assertion (CWE-617). A remote attacker can terminate the daemon by sending an NTS request containing an excess number of NTS Cookie Placeholder extension fields . This vulnerability results in a High availabilit...

CVE-2026-102483 Reachable Assertion in ntpsec

Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS request with excess NTS Cookie Placeholder extension fields...

net/http: golang: net/http: HTTP request smuggling via improper handling of HTTP/1 CONNECT responses

A flaw was found in Go's net/http package. When an HTTP server sends a successful response to an HTTP/1 CONNECT request without taking raw control of the connection, it improperly continues to process incoming data as standard HTTP requests instead of establishing a tunnel. A remote attacker can...

net/http: golang: net/http: HTTP request smuggling via improper handling of HTTP/1 CONNECT responses

A flaw was found in Go's net/http package. When an HTTP server sends a successful response to an HTTP/1 CONNECT request without taking raw control of the connection, it improperly continues to process incoming data as standard HTTP requests instead of establishing a tunnel. A remote attacker can...

net/http: golang: net/http: HTTP request smuggling via improper handling of HTTP/1 CONNECT responses

A flaw was found in Go's net/http package. When an HTTP server sends a successful response to an HTTP/1 CONNECT request without taking raw control of the connection, it improperly continues to process incoming data as standard HTTP requests instead of establishing a tunnel. A remote attacker can...

net/http: golang: net/http: HTTP request smuggling via improper handling of HTTP/1 CONNECT responses

A flaw was found in Go's net/http package. When an HTTP server sends a successful response to an HTTP/1 CONNECT request without taking raw control of the connection, it improperly continues to process incoming data as standard HTTP requests instead of establishing a tunnel. A remote attacker can...

Exploit for CVE-2026-109618

CVE-2026-109618 Affected-Version Checker Non-destructive chec...

CVE-2026-109618

out-of-memory handling can interrupt PHP while internal request data is only partially initialized. Request cleanup may then treat the invalid data as valid...

USN-8948-1 php8.1, php8.3, php8.5 vulnerabilities

It was discovered that PHP incorrectly handled out-of-memory conditions while processing requests. A remote attacker could use this issue to execute arbitrary code. CVE-2026-109618 It was discovered that PHP incorrectly managed internal request state across worker reuse. A remote attacker could u...

USN-8948-1: PHP vulnerabilities

It was discovered that PHP incorrectly handled out-of-memory conditions while processing requests. A remote attacker could use this issue to execute arbitrary code. CVE-2026-109618 It was discovered that PHP incorrectly managed internal request state across worker reuse. A remote attacker could u...

CVE-2026-109618 RCE via OOM corruption

PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may re...

CVE-2026-109618 RCE via OOM corruption

PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may re...

CVE-2026-109618

PHP versions prior to 8.2.35, 8.3.36, 8.4.27, and 8.5.12 are vulnerable to a critical Use-After-Free (UAF) flaw (CVSS 9.2) triggered during out-of-memory (OOM) errors. The issue stems from the use of longjmp() (via zend_bailout()) to handle OOM conditions, which fails to perform necessary cleanup...

CVE-2026-86146

Inconsistent interpretation of HTTP requests HTTP request/response smuggling in the bundled HTTP/1.1 parser of Apache bRPC version 1.18.0 on all platforms allows remote attackers to smuggle requests and inject headers when bRPC is deployed behind a proxy or load balancer that parses the same byte...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling via free-socket reuse in the HTTP Agent. A remote HTTP peer can send response bytes that reach an idle keep-alive socket’s OS buffer before the event loop polls; the Agent may then reuse that socket and parse thos...

CVE-2026-74757

Uncontrolled resource allocation in the mcpack2pb component in Apache bRPC version 1.18.0 on all platforms allows remote attackers to make the server allocate a large amount of memory via sending a crafted mcpack request with a huge array item count. Root Cause: The bRPC mcpack2pb parser trusts t...

CVE-2026-86146 Apache bRPC: HTTP Request Smuggling and Header Injection via Lenient HTTP/1.1 Header Parsing

Inconsistent interpretation of HTTP requests HTTP request/response smuggling in the bundled HTTP/1.1 parser of Apache bRPC version 1.18.0 on all platforms allows remote attackers to smuggle requests and inject headers when bRPC is deployed behind a proxy or load balancer that parses the same byte...

EUVD-2026-107226

Inconsistent interpretation of HTTP requests HTTP request/response smuggling in the bundled HTTP/1.1 parser of Apache bRPC version 1.18.0 on all platforms allows remote attackers to smuggle requests and inject headers when bRPC is deployed behind a proxy or load balancer that parses the same byte...

CVE-2026-86146

Apache bRPC (version

RLSA-2026:85276 Moderate: hostapd security update

hostapd is a user space daemon for access point and authentication servers. It implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP Authenticators and RADIUS authentication server. hostapd is designed to be a "daemon" program that runs in the back-ground and acts as the backen...