CVE-2026-46560 OpenAM Authentication Bypass via RADIUS Spoofing

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the RADIUS authentication module opens an unconnected datagram socket and trusts the first UDP datagram received on the client source port. The receive path does not verify the source IP and port, match the response...

CVE-2026-46560

In OpenAM Community Edition (through version 16.0.6 ), an Improper Verification of Cryptographic Signature (CWE-347) in the RADIUS authentication module allows unauthenticated network attackers to bypass authentication. The module opens an unconnected datagram socket and accepts the first UDP dat...

Open Identity Platform OpenAM encryption issue vulnerability

Versions of OpenAM prior to 16.1.1 contain an encryption-related vulnerability. This vulnerability arises because the RADIUS authentication module trusts the first UDP datagram received from a client source port; it fails to validate the source IP and port, the response identifier, or the RFC 286...

DEBIAN-CVE-2026-116744

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissectsoftetherhostfqdn in softether.c that compares hostname using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp t...

CVE-2026-116744 ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther Dissector

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissectsoftetherhostfqdn in softether.c that compares hostname using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp t...

PT-2026-125493

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect softether host fqdn in softether.c that compares host name using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strnc...

CentOS Linux 7 [TuxCare] Security Update: unbound / unbound-devel / unbound-libs / unbound-python Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792811393)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792811393 advisory. - In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with...

CVE-2026-76445

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service DoS condition. The vulnerability is due to a flaw in logic handling...

CVE-2026-76445 Multiple Cisco Products Snort 3 Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service DoS condition. The vulnerability is due to a flaw in logic handling...

CVE-2026-76445

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine caused by a logic flaw when processing GPRS Tunneling Protocol (GTP) extension headers within the codec. An unauthenticated, remote attacker can exploit this by sending a crafted, fragmented UDP datagram conta...

EUVD-2026-107385

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service DoS condition. The vulnerability is due to a flaw in logic handling...

CVE-2026-76445 Multiple Cisco Products Snort 3 Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service DoS condition. The vulnerability is due to a flaw in logic handling...

Multiple Cisco Products Snort 3 Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service DoS condition. The vulnerability is due to a flaw in logic handling...

CVE-2026-109125

NLnet Labs Unbound up to and including version 1.26.1 is vulnerable to a cache-level side-channel when configured with unwanted-reply-threshold > 0 (which is not the default). The vulnerability occurs because Unbound counts response-like UDP datagrams that do not match a pending query's TXID as

CVE-2026-109125 Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold'

In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with 'unwanted-reply-threshold 0' configurations not a default configuration. If a response-like UDP datagram reaches the upstream source port currently used by a recursive query, but i...

PT-2026-120690

Name of the Vulnerable Software and Affected Versions Cisco products affected versions not specified Description A flaw in the Snort 3 Detection Engine allows an unauthenticated remote attacker to cause a denial of service DoS condition. The issue occurs during the processing of General Packet...

Cisco FTD: CVE-2026-76445: Multiple Cisco Products Snort 3 Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service DoS condition. The vulnerability is due to a flaw in logic handling...

Multiple Cisco Products Snort 3 DoS (cisco-sa-snort3-gtpcodec-dos-Rmecfepz)

According to its self-reported version, Cisco ASA Software is affected by a vulnerability. - Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resultin...

CVE-2026-104944

TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer dispatch in its TDP TP-Link Device Protocol daemon. A single unauthenticated UDP datagram can cause an invalid indirect call, crashing the main service and resulting in a denial-of-service condition. Successful exploitation may all...

CVE-2026-104944 Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500

TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer dispatch in its TDP TP-Link Device Protocol daemon. A single unauthenticated UDP datagram can cause an invalid indirect call, crashing the main service and resulting in a denial-of-service condition. Successful exploitation may all...