39 casos · pág. 1/2
A vulnerability in Signal's open-source RingRTC calling library, tracked as CVE-2026-113380 (CVSS 9.3), can stop a call from terminating properly. This can leave audio and possibly video channels open after a user hangs up. MITRE published the CVE on Tuesday. The affected versions are every RingRTC release before 2.72.0, and the fix shipp…
Cisco disclosed CVE-2026-76445, a medium-severity vulnerability in the Snort 3 Detection Engine that affects multiple Cisco products. An unauthenticated, remote attacker can send a crafted, fragmented UDP datagram containing GPRS Tunneling Protocol (GTP) extension headers. This makes the detection engine enter an infinite loop and restart…
Cisco published an advisory covering multiple vulnerabilities in the Snort 3 Detection Engine that affect several Cisco products. An unauthenticated, remote attacker could force the engine to restart unexpectedly, causing a denial of service (DoS). Cisco rates the Security Impact Rating as Medium and has released software updates. No work…
Cisco disclosed CVE-2026-20011, a medium-severity vulnerability in the Snort 3 SMTP MIME Decoder affecting multiple Cisco products. An unauthenticated, remote attacker can cause the Snort 3 Detection Engine to restart, producing a denial-of-service condition. Cisco has released software updates, and no workarounds exist. The advisory is p…
Cisco disclosed CVE-2026-76505, a High-rated vulnerability in the IPv4 packet processing of Cisco IOS XR Software on Cisco ASR 9000 and 9900 Series routers and ASR 9902/9903 Compact High-Performance Routers. An unauthenticated, remote attacker can send crafted IPv4 packets that trigger network processor (NP) errors, resetting or shutting …
Palo Alto Networks PSIRT published advisory CVE-2026-0318, a denial-of-service (DoS) vulnerability in PAN-OS affecting Panorama management appliances. The excerpt lists affected builds across the 11.1, 11.2, 12.1 and 12.2 release trains, including many hotfix (h) builds. It gives no CVSS score, attack vector, authentication requirements, …
Palo Alto Networks PSIRT published advisory CVE-2026-0314, a local denial-of-service (DoS) vulnerability in the GlobalProtect App for Windows. The advisory lists a wide range of affected releases across the 6.0, 6.2 and 6.3 branches. The excerpt gives no CVSS score, exploitation status, attacker prerequisites or fixed versions. Defenders …
Palo Alto Networks PSIRT published an advisory for CVE-2026-0317, a denial-of-service vulnerability in PAN-OS, the operating system of its firewalls. The text provided contains only the advisory title and a list of affected-version CPE entries. It does not give a CVSS score, attack conditions, exploitation status or fixed versions. Defend…
Cisco disclosed CVE-2026-20154, a high-severity vulnerability in the system rate-limiting process for syslog message 419002 in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. An unauthenticated, remote attacker can cause high CPU utilization on an affected device, r…
Cisco updated its advisory for CVE-2024-20260, a denial-of-service vulnerability in the VPN and management web servers of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. The original version covered only the ASAv and FTDv virtual models, but Cisco later found that a…
Cisco disclosed CVE-2026-20173, a medium-severity vulnerability in Cisco NX-OS Software that lets an unauthenticated, remote attacker exhaust system resources and cause a denial of service (DoS). The flaw exists because rate limiting is improperly applied to some protocols. The DoS condition clears without manual intervention soon after t…
Cisco disclosed CVE-2026-20221, a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3 Detection Engine that affects multiple Cisco products. An unauthenticated, remote attacker can send a crafted GRE payload through an affected device to trigger an unexpected restart of the engine. Dependin…
Cisco disclosed CVE-2026-20218, a stack buffer overflow in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine that affects multiple Cisco products. An unauthenticated, remote attacker can send crafted VBA data to a targeted device, causing the Snort 3 Detection Engine to restart unexpectedly and producing a denial of ser…
CERT-FR advisory CERTFR-2026-AVI-1319, published 15 October 2026, reports a vulnerability in PostgreSQL psqlODBC that lets a remote attacker cause a denial of service. The flaw is tracked as CVE-2026-109448 and affects psqlODBC versions prior to 18.00.0005. The advisory is based on the PostgreSQL project's security release of 14 October 2…
CERT-FR advisory CERTFR-2026-AVI-1324, published 15 October 2026, reports multiple vulnerabilities in Symfony components that allow a remote attacker to cause a denial of service. The affected components are symfony/expression-language, symfony/http-foundation, symfony/symfony and symfony/yaml, across the 5.4, 6.x, 7.x and 8.x branches. T…
A denial-of-service vulnerability, CVE-2026-42931, affects the npm endpoint of the Gitea Package Registry. The AddPackageTag function reads the entire HTTP request body into memory with io.ReadAll() before any validation, so a single oversized request can crash the whole Gitea process. Any authenticated user can trigger it against their o…
Cisco disclosed multiple critical vulnerabilities in the Next Generation OAM (NGOAM) feature of Cisco NX-OS Software, affecting Cisco Nexus 3000 Series and Nexus 9000 Series switches. An unauthenticated, remote attacker could execute arbitrary code with root privileges or cause a denial of service (DoS) on an affected device. The flaws ar…
Cisco disclosed a critical vulnerability, CVE-2026-76465, in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series and Nexus 9000 Series switches. An unauthenticated, remote attacker could execute arbitrary code with root privileges or cause a denial of service (DoS) on an af…
Cisco disclosed a critical vulnerability, CVE-2026-76471, in the NX-API feature of Cisco NX-OS Software. An unauthenticated, remote attacker could use it to execute arbitrary code with root privileges or to cause a denial of service on an affected device. Cisco rates the Security Impact as Critical. Software updates are available and no w…
Bright Security announced the launch of STAR Fuzzer, an agentic fuzzer in its Bright STAR platform. It uses AI to select security-critical functions and generate harnesses, then runs an evolutionary search engine to find faults and delivers byte-exact reproducing payloads. In pre-release testing, 45% of the open-source projects tested had…
