CVE-2026-101950

A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity via malformed IPv4 packets reaching an interface configured f...

EUVD-2026-101490

An Integer Underflow Wrap or Wraparound vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an adjacent unauthenticated attacker to cause a forwarding-plane denial of service via an ICMP message associated with an SVR carrier session...

CVE-2026-101950 Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled

A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity via malformed IPv4 packets reaching an interface configured f...

EUVD-2026-101471

A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity via malformed IPv4 packets reaching an interface configured f...

CVE-2026-101950 Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled

A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity via malformed IPv4 packets reaching an interface configured f...

PT-2026-113804

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX Series affected versions not specified Description A Heap-based Buffer Overflow occurs in the SVR component. This allows an unauthenticated network attacker to cause a denial of service and potentially compromi...

CVE-2026-101950: Heap-based Buffer Overflow

A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity via malformed IPv4 packets reaching an interface configured f...

CVE-2026-101938: Integer Underflow (Wrap or Wraparound)

An Integer Underflow Wrap or Wraparound vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an adjacent unauthenticated attacker to cause a forwarding-plane denial of service via an ICMP message associated with an SVR carrier session...

PT-2026-113793

An Integer Underflow Wrap or Wraparound vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an adjacent unauthenticated attacker to cause a forwarding-plane denial of service via an ICMP message associated with an SVR carrier session...

com.addc:addc-svr-tomcat (2.5), org.apache.ode:ode-tomee (1.3.8) +5 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (8.5.28)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.addc:addc-svr-tomcat 2.5 - org.apache.ode:ode-tomee 1.3.8 -...

com.addc:addc-svr-tomcat (>=2.6, <=2.9), com.github.psi-probe:psi-probe-tomcat85 (3.3.0) +4 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (8.5.40)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.40 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.addc:addc-svr-tomcat =2.6, =2.9 - com.github.psi-probe:psi-probe-tomcat85 3.3.0 -...

com.addc:addc-svr-mvc (>=2.6, <=2.9), com.addc:addc-web-mvc (>=2.6, <=2.9) +93 more potentially affected by CVE-2026-22732 via org.springframework.security:spring-security-web (4.2.12.release)

org.springframework.security:spring-security-web MAVEN version 4.2.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.addc:addc-svr-mvc =2.6, =2.6, =2.6, =4.1.2, =4.1.2...

SSH Dropbear recv_msg_userauth_request() Unauthenticated Access

The vulnerability of the recvmsguserauthrequest function in the svr-auth.c file of the SSH Dropbear session management software is related to errors in processing information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

Exploit for SQL Injection in Mitel Micollab

CVE-2025-52914 How does this detection method work? Versi...

com.github.rebue.jwt:jwt-svr (1.1.0), com.github.rebue.scx:zuul-server (1.1.0) +1 more potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (7.6)

com.nimbusds:nimbus-jose-jwt MAVEN version 7.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.github.rebue.jwt:jwt-svr 1.1.0 - com.github.rebue.scx:zuul-server 1.1.0 -...

CVE-2024-29167

SVR-116 firmware version 1.6.0.30028871 allows a remote authenticated attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product...

Earth Koshchei Coopts Red Team Tools in Complex RDP Attacks

APT group Earth Koshchei, suspected to be sponsored by the SVR, executed a large-scale rogue RDP campaign using spear-phishing emails, red team tools, and sophisticated anonymization techniques to target high-profile sectors...

com.addc:addc-svr-tomcat (2.5), org.apache.ode:ode-tomee (1.3.8) +5 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.28)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.addc:addc-svr-tomcat 2.5 - org.apache.ode:ode-tomee 1.3.8 -...

CISA Warns of Threat Actors Exploiting F5 BIG-IP Cookies for Network Reconnaissance

The U.S. Cybersecurity and Infrastructure Security Agency CISA is warning that it has observed threat actors leveraging unencrypted persistent cookies managed by the F5 BIG-IP Local Traffic Manager LTM module to conduct reconnaissance of target networks. It said the module is being used to...

CVE-2024-29167

SVR-116 firmware version 1.6.0.30028871 allows a remote authenticated attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product...