UBUNTU-CVE-2026-102253

iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagra...

CVE-2026-102253 iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS

iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagra...

CVE-2026-102253 iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS

iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagra...

CVE-2026-102253 iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS

iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagra...

CVE-2026-102253

Versions of iperf3 prior to 3.22 are vulnerable to a denial of service (DoS) vulnerability. An unauthenticated remote attacker can trigger an unrecoverable infinite loop in the server's UDP receive worker by sending a single crafted control-channel parameter message followed by one 16-byte UDP da...

CVE-2026-102726

Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read...

CVE-2026-102726

Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read...

CVE-2026-102726

Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read...

CVE-2026-102726

Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read...

CVE-2026-102726

The NetX Duo software (referenced via GHSA-2wwp-ffgp-6ggj ) is vulnerable to a worker stall and an out-of-bounds read due to unbounded PPP IPCP Option Parsing . This issue impacts the availability of the system, as indicated by the CVSS metrics. No specific exploit details or remediation versions...

EUVD-2026-89193

Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read...

Exploit for OS Command Injection in Kestra

CVE-2026-49869: Kestra Unauthenticated Remote Code Execution...

PT-2026-102792

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An issue exists where unbounded PPP IPCP option parsing leads to a worker stall and an out-of-bounds read. PPP Point-to-Point Protocol IPCP Internet Protocol...

CVE-2026-102726: Out-of-bounds Read

Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read...

CVE-2026-93829

A flaw was found in the Linux kernel. A race condition exists in the Server Message Block SMB client during background worker thread creation, allowing a newly spawned thread to access connection session data before it has been completely initialized. A local user initiating an SMB connection can...

CVE-2026-78424

Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies write permission or anyone with access to NeuVector’s internal gRPC certificate key pair the ability to inject OS commands in the privileged enforcer container, which can lead to the...

EUVD-2026-88224

Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies write permission or anyone with access to NeuVector’s internal gRPC certificate key pair the ability to inject OS commands in the privileged enforcer container, which can lead to the...

Malicious Package

Overview capacitor-plugin-service-worker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

CVE-2026-78424: Improper Neutralization of Special Elements used in an OS Command

Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies write permission or anyone with access to NeuVector’s internal gRPC certificate key pair the ability to inject OS commands in the privileged enforcer container, which can lead to the...

CVE-2026-101088

Nezha is a server and website monitoring tool. In versions = 2.2.11 and 2.3.1, the service sentinel worker service/singleton/servicesentinel.go contains an incomplete fix for a previously reported nil dereference denial of service GHSA-qjpp-gffx-2wm9. The 2026-07-21 fix re-validated the service...