CVE-2026-97891

The Eclipse Kura Web Console (versions 5.0.0 to 5.6.2 ) is vulnerable to an unbounded resource consumption flaw. The system allocates a new HTTP session for every request made to built-in authentication endpoints—specifically /admin/auth , /admin/login/password , and /admin/login/cert —before val...

CVE-2026-97891

In Eclipse Kura version 5.0.0 to 5.6.2, the Web Console allocates a new HTTP session for every request to its built-in authentication endpoints /admin/auth, /admin/login/password, /admin/login/cert before checking the HTTP method, parsing the request, or validating any submitted credentials, and...

CVE-2026-97891

In Eclipse Kura version 5.0.0 to 5.6.2, the Web Console allocates a new HTTP session for every request to its built-in authentication endpoints /admin/auth, /admin/login/password, /admin/login/cert before checking the HTTP method, parsing the request, or validating any submitted credentials, and...

AZL-98108 CVE-2026-80707 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: can: j1939: transport: j1939sessionfreshnew: initialize receive buffer Zero the allocated buffer in j1939sessionfreshnew to ensure it contains no residual data. While there is a potential performance impact if users allocate...

CVE-2026-59279 Unbounded persistent session allocation via repeated initialize requests

The MCP Streamable HTTP server transport WebFlux and WebMvc variants does not place any limit on the number of sessions it retains, and by default does not require clients to be authenticated. As a result, a remote attacker can cause the server to accumulate an unbounded number of sessions over...

CVE-2026-59279

Spring AI 2.0.0 is affected by a Denial of Service vulnerability in the MCP Streamable HTTP server transport (both WebFlux and WebMvc variants). The transport does not impose any limit on the number of sessions it retains and, by default, does not require client authentication. A remote unauthent...

CVE-2026-59279 Unbounded persistent session allocation via repeated initialize requests

The MCP Streamable HTTP server transport WebFlux and WebMvc variants does not place any limit on the number of sessions it retains, and by default does not require clients to be authenticated. As a result, a remote attacker can cause the server to accumulate an unbounded number of sessions over...

cve-2026-59279 - HIGH - Unbounded persistent session allocation via repeated initialize requests

cve-2026-59279 - HIGH - Unbounded persistent session allocation via repeated initialize requests...

CVE-2022-49950

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix memory corruption on open The probe session-duplication overflow check incremented the session count also when there were no more available sessions so that memory beyond the fixed-size slab-allocated session...

CVE-2022-49950 misc: fastrpc: fix memory corruption on open

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix memory corruption on open The probe session-duplication overflow check incremented the session count also when there were no more available sessions so that memory beyond the fixed-size slab-allocated session...

CVE-2022-49950 misc: fastrpc: fix memory corruption on open

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix memory corruption on open The probe session-duplication overflow check incremented the session count also when there were no more available sessions so that memory beyond the fixed-size slab-allocated session...

Changes in Experimental Support for XenApp and Multiple GPUs

What are Experimental Features? This article covers a product configuration or procedure for which Citrix does not currently offer support. Use of this configuration should only be used in a lab or test environment and not with production deployments. Experimental features are occasionally releas...