CVE-2026-91149 Cockpit: cockpit: denial of service via unbounded connection thread spawning

A flaw was found in Cockpit. An unauthenticated remote attacker can exploit this vulnerability by initiating and sustaining numerous simultaneous connections to the cockpit-tls service. This forces the service to create an unbounded number of detached threads, consuming system resources such as...

CVE-2026-91149

A flaw in Cockpit allows an unauthenticated remote attacker to trigger a denial of service by initiating and sustaining numerous simultaneous connections to the cockpit-tls service. The service creates an unbounded number of detached threads , exhausting system resources such as memory and file d...

CVE-2026-91149 Cockpit: cockpit: denial of service via unbounded connection thread spawning

A flaw was found in Cockpit. An unauthenticated remote attacker can exploit this vulnerability by initiating and sustaining numerous simultaneous connections to the cockpit-tls service. This forces the service to create an unbounded number of detached threads, consuming system resources such as...

EUVD-2026-58049

rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system resources by specifying the --zt short alias for --compress-threads, which bypasses the refuse options directive's string matching on long option names. Attackers can specify --zt=N...