EUVD-2026-3214

An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component of B&R Automation Runtime versions prior to 6.5 and prior to R4.93 could be exploited by an unauthenti-cated attacker on the network to win a race condition, resulting in permanent denial-of-service...

CVE-2025-11044

CVE-2025-11044 concerns the ANSL-Server component in B&R Automation Runtime, affecting versions prior to 6.5 and prior to R4.93. The description identifies an Allocation of Resources Without Limits or Throttling vulnerability that an unauthenticated attacker on the network can exploit to trigger ...

ABB B&R Automation Runtime

SUMMARY ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that resolves a vulnerability. An attacker who successfully exploited this vulnerability could cause the product to stop. 2. FREQUENTLY ASKED QUESTIONS What causes the...

B&R Automation Runtime security vulnerabilities

B&R Automation Runtime is an automation runtime provided by B&R Automation Inc. Versions prior to B&R Automation Runtime 6.5 and R4.93 contained security vulnerabilities. These vulnerabilities stemmed from unlimited resource allocation or throttling in the ANSL-server component, which could allow...

CVE-2025-11044: Allocation of Resources Without Limits or Throttling

An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component of B&R Automation Runtime versions prior to 6.5 and prior to R4.93 could be exploited by an unauthenti-cated attacker on the network to win a race condition, resulting in permanent denial-of-service...

PT-2026-3450

Name of the Vulnerable Software and Affected Versions B&R Automation Runtime versions prior to 6.5 B&R Automation Runtime versions prior to R4.93 Description An issue exists in the ANSL-Server component that involves allocation of resources without limits or throttling. An unauthenticated attacke...

MiracleLinux 4 : java-1.6.0-openjdk-1.6.0.0-1.56.1.11.8.AXS4 (AXSA:2013-99:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-99:01 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2013-0424 Unspecified vulnerability in the Java Runtime Environment JRE...

MiracleLinux 3 : java-1.6.0-openjdk-1.6.0.0-1.42.1.11.14.0.1.AXS3 (AXSA:2013-683:04)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-683:04 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2013-3829 Unspecified vulnerability in the Java SE, Java SE Embedded...

MiracleLinux 7 : java-1.7.0-openjdk-1.7.0.99-2.6.5.0.1.el7.AXS7 (AXSA:2016-197:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-197:01 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2016-0636 RESERVED This candidate has been reserved by an organization or...

MiracleLinux 3 : java-1.6.0-openjdk-1.6.0.0-1.41.1.11.11.90.0.1.AXS3 (AXSA:2013-553:03)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-553:03 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2013-1500 Unspecified vulnerability in the Java Runtime Environment JRE...

Node.js DoS

The vulnerability of the Node.js software platform is related to an error in handling exceptional states. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

MiracleLinux 4 : java-1.8.0-openjdk-1.8.0.51-0.b16.AXS4 (AXSA:2015-186:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-186:02 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2015-2590 RESERVED This candidate has been reserved by an organization ...

azureml-automl-dnn-nlp (>=1.37.0, <=1.46.1.post1), azureml-automl-dnn-vision (>=1.37.0, <=1.46.1) +31 more potentially affected by CVE-2026-23528 via distributed (2.30.1)

distributed PYPI version 2.30.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - azureml-automl-dnn-nlp =1.37.0, =1.37.0, =1.34.0, =1.37.0, =1.37.0, =0.1.0, =0.9.22.post0, =0.1.0, =0.1.0, =0.1.0a1, =0.0.5, =0.0.5, =0.1...

azureml-automl-dnn-nlp (>=1.47.0, <=1.48.0.post1), azureml-automl-dnn-vision (>=1.47.0, <=1.48.0) +4 more potentially affected by CVE-2026-23528 via distributed (2021.6.0)

distributed PYPI version 2021.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - azureml-automl-dnn-nlp =1.47.0, =1.47.0, =1.47.0, =1.47.0, =1.47.0.post1, =0.20.0, =0.21.1 Source cves: CVE-2026-23528 Source advisory:...

coiled-runtime (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-23528 via distributed (2022.6.0)

distributed PYPI version 2022.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - coiled-runtime =0.1.0, =0.1.1 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

azureml-automl-dnn-nlp (>=1.47.0, <=1.48.0.post1), azureml-automl-dnn-vision (>=1.47.0, <=1.48.0) +4 more potentially affected by CVE-2026-23528 via distributed (2021.6.0)

distributed PYPI version 2021.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - azureml-automl-dnn-nlp =1.47.0, =1.47.0, =1.47.0, =1.47.0, =1.47.0.post1, =0.20.0, =0.21.1 Source cves: CVE-2026-23528 Source advisory:...

coiled-runtime (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-23528 via distributed (2022.6.0)

distributed PYPI version 2022.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - coiled-runtime =0.1.0, =0.1.1 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

coiled-runtime (>=0.2.0, <=0.2.1), dask-cuda (>=22.12.0a221208, <=23.2.0a221212) +3 more potentially affected by CVE-2026-23528 via distributed (2022.11.1)

distributed PYPI version 2022.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - coiled-runtime =0.2.0, =22.12.0a221208, =1.0.0, =0.1.7, =0.4.36 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

Malware in wac-relay-runtime

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview wac-relay-runtime is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...