CVE-2026-75476

Tanium addressed a compression bomb vulnerability in Threat Response.

Tanium addressed a compression bomb vulnerability in Threat Response.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed

Vendors

Tanium

Products

Threat Response

CVE-2026-11617

Tanium addressed a compression bomb vulnerability in Findings.

Tanium addressed a compression bomb vulnerability in Findings.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed

Vendors

Tanium

Products

Findings

CVE-2026-47881

Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File

Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physical lines — for example, a CSV field that contains embedded newlines wrapped in quotes. A specially crafted input file could exploit the way the reader assembles those multi-line records to consume excessive CPU time and memory, causing the batch job to stall or run out of memory. Spring Batch 6.0.0 - 6.0.4 Spring Batch 5.2.0 - 5.2.6 Spring Batch 4.3.0 - 4.3.13

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Broadcom Spring

Products

Spring Batch Spring Batch

CVE-2022-38178

Memory leaks in EdDSA DNSSEC verification code

By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed

Vendors

Debian Fedoraproject Isc and 2 more

Products

Debian Linux Fedora Bind and 5 more

CVE-2022-38177

Memory leak in ECDSA DNSSEC verification code

By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.

CVSS 3.1 · 7.5 High EPSS 3.3% KEV · Not listed

Vendors

Debian Fedoraproject Isc and 2 more

Products

Debian Linux Fedora Bind and 5 more

CVE-2022-2795

Processing large delegations may severely degrade resolver performance

By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.

CVSS 3.1 · 5.3 Medium EPSS 2.3% KEV · Not listed

Vendors

Debian Fedoraproject Isc and 1 more

Products

Debian Linux Fedora Bind and 2 more

CVE-2026-83619

xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.7.0 until 0.8.15, the release-0.8.x parser in lib/sax.js trims captured end-tag names with the unanchored global expression /[ \t\n\r]+$/g. For an end tag containing a long whitespace run followed by a non-whitespace character, the expression retries from each possible starting position and backtracks quadratically before failing its end anchor. DOMParser.parseFromString() reaches the path under default options, allowing a small unauthenticated XML input to stall the Node.js event loop; the 0.9.x and unscoped npm lines do not contain this expression. This issue is fixed in @xmldom/xmldom version 0.8.15.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Xmldom

Products

Xmldom

CVE-2026-59274

Unbounded decompression in UnZipTransformer enables zip-bomb DoS

The UnZipTransformer does not limit decompressed entry size or entry count when processing archives. Consequently, an attacker can send a zip archive that can exhaust JVM heap memory, causing a denial-of-service outage. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Spring Vmware

Products

Spring Integration Spring Integration

CVE-2026-83612

xmldom: HTML raw-text closing-tag case mismatch causes output amplification

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0-beta.1 until 0.9.12, HTML-mode parsing through DOMParser.parseFromString() mishandles a mixed-case closing tag for the script, style, textarea, or title raw-text elements. parseHtmlSpecialContent, selected by isHTMLRawTextElement or isHTMLEscapableRawTextElement, uses a case-sensitive indexOf() and then calls substring() with a missing-close result of negative one, causing unstable parser progression and quadratic output amplification. A small untrusted text/html document can consequently consume disproportionate CPU and memory when parsed and serialized. This issue is fixed in @xmldom/xmldom version 0.9.12.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Xmldom

Products

Xmldom

CVE-2026-83606

xmldom PI grammar regex ReDoS: quadratic backtracking on unterminated processing instructions

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0-beta.9 until 0.9.11, the processing-instruction production in lib/grammar.js lets the greedy S+ separator and lazy Char*? data group repeatedly repartition a long whitespace tail when the required closing ?> is absent. Both parsePI and parseProcessingInstruction apply the expression to the entire remaining source, causing quadratic backtracking during DOMParser.parseFromString() under default options and allowing a small unauthenticated XML input to stall the Node.js event loop. This issue is fixed in @xmldom/xmldom version 0.9.11.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Xmldom

Products

Xmldom

CVE-2026-82588

Open5GS Transfer Endpoint namf-handler.c null pointer dereference

A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/namf-handler.c of the component Transfer Endpoint. Such manipulation leads to null pointer dereference. The attack can be launched remotely. Upgrading to version 2.8.0 is capable of addressing this issue. The name of the patch is abf8a836564b966b5141110fc25ed413c4f17522. Upgrading the affected component is advised.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Open5gs

Products

Open5gs

CVE-2026-20780

Denial of Service via Uncontrolled Resource Consumption in Intel PROSet/Wireless WiFi Driver

Uncontrolled resource consumption for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Intel

Products

Intel Proset Wireless Wifi Software For Windows Killer Wi-fi 6 Ax1650i\/s Killer Wi-fi 6e Ax1675i\/s and 16 more

CVE-2026-72685

Inefficient Algorithmic Complexity in Elasticsearch Leading to Denial of Service

A flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input. Processing one such document occupies a worker thread from a bounded pool for a disproportionate amount of time, degrading the availability of indexing operations on the affected node.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Elastic

Products

Elasticsearch

CVE-2026-79771

Nokogiri before 1.19.3 Memory Leak via XSLT Transform

Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this by passing attacker-controlled input with null bytes to transform parameters, causing heap allocations to leak and enabling denial of service against long-running processes.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Nokogiri Sparklemotion

Products

Nokogiri Nokogiri

CVE-2026-62326

Weblate Has Uncontrolled Resource Consumption via

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a user with the built-in "Edit source" role can store a malicious regular expression in a source string's flags that is executed without any timeout, allowing them to stall requests and deny service. Regular expressions supplied through the regex: quality check and regex placeholders are compiled during validation but later run against translation content in RegexCheck and PlaceholderCheck with no time limit, so a catastrophic-backtracking pattern like ^(a|aa)+$ can consume CPU indefinitely. Because Weblate re-runs these checks for every linked target unit in the same request when a source unit's flags change, a single edit can trigger sustained CPU-bound denial of service. This issue is fixed in version 2026.7.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Weblate

Products

Weblate

CVE-2026-27852

dovecot: Dovecot: Denial of service via crafted email headers

An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which causes excessive memory usage when the message is later parsed. The message is still delivered, but reading it over IMAP can exhaust the memory limit of the process and terminate it, causing denial of service for the affected user. Update to non-vulnerable version. No publicly available exploits are known.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Open-xchange

Products

Ox Dovecot Ce Ox Dovecot Pro

CVE-2026-33263

dovecot: Dovecot: Denial of Service and potential message duplication via connection limit exhaustion

When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with epoll() panic caused by file descriptor handling issues. If running in high-security mode (default for community releases), only the new submission connection gets terminated. If running in high-performance mode (default for Pro releases), all connections handled by the submission-login process will be terminated. The crashes can cause failure for user to send a message, or it can cause duplicate messages to be sent. If TLS is not used (in the backend server processing the submission), duplicate deliveries cannot happen, because the crash can only happen at AUTH stage. Limit the number of connections handled by single submission-login process. This has a performance impact though. Update to non-vulnerable version. No publicly available exploits are known.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Open-xchange

Products

Ox Dovecot Ce Ox Dovecot Pro

CVE-2026-33605

dovecot: Dovecot: Denial of Service in ManageSieve login process

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode (default for community releases), only the attacker's own connection is terminated. If running in high-performance mode (default for Pro releases), all connections handled by the same managesieve-login process are terminated. Repeating the attack can cause denial of service for Sieve script management. Restrict network access to the ManageSieve service to trusted clients. Update to non-vulnerable version. No publicly available exploits are known.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Open-xchange

Products

Ox Dovecot Ce Ox Dovecot Pro

CVE-2026-33607

dovecot: Dovecot: Denial of Service via IMAP LIST command

An attacker that has valid credentials can use IMAP LIST command to consume CPU. This can cause degradation or denial of service for IMAP. Monitor system for abnormal CPU usage and kill the offending process and lock account. Alternatively install fixed version. No publicly available exploits are known.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Open-xchange

Products

Ox Dovecot Ce Ox Dovecot Pro

CVE-2026-40014

dovecot: Dovecot: Denial of Service via crafted IMAP THREAD command

An attacker that can send mail to a user can craft a message header that makes the IMAP THREAD command consume CPU disproportionate to the size of the message. When a mail client issues a THREAD command on the affected mailbox, this can cause degradation or denial of service for IMAP. Monitor system for abnormal CPU usage, kill the offending process and remove the offending message from the affected mailbox. Update to non-vulnerable version. No publicly available exploits are known.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Open-xchange

Products

Ox Dovecot Ce Ox Dovecot Pro