CVE-2026-112112 is a low-severity vulnerability in the CZ.NIC BIRD Internet Routing Daemon affecting IPv6 FlowSpec validation. It allows an established BGP peer to bypass validation and inject FlowSpec rules that match destinations outside the authorized address space. This occurs because BIRD fails to reject a destination prefix component with a nonzero offset as required by RFC 8956 section 5, validating a reconstructed prefix with zero-filled skipped bits instead. Consequently, unauthorized traffic filtering or redirection may occur if export policies permit propagation of these rules to downstream peers.
CVE-2026-102184 is a high-severity vulnerability in Juniper Networks Junos OS and Junos Evolved platforms. It involves improper validation of specified quantity in input within the routing protocol daemon (rpd). A configured EVPN signaling peer can send a malformed SRv6 structure in an EVPN route update, causing the rpd process to crash. This results in a denial of service affecting routing adjacencies. The vulnerability affects multiple specific versions of Junos OS and Junos Evolved as detailed in the affectedVersions field.
CVE-2026-102183 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). It involves improper validation of specified quantity in input, allowing a configured BGP EVPN peer to cause an rpd crash via a malformed NLRI. This results in a denial of service condition. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. No known exploits are reported in the wild at this time.
CVE-2026-102033 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved. It involves improper validation of specified quantity in input within the l2ald component, allowing an adjacent attacker to cause a denial of service via an ICCP MC-LAG message. The vulnerability does not impact confidentiality or integrity but affects availability.
CVE-2026-102019 is a medium severity vulnerability in Juniper Networks Junos OS and Junos Evolved. It involves improper validation of specified quantity in input within the rpd process, allowing an unauthenticated adjacent attacker to cause a denial-of-service (DoS) condition via a malformed RIPv2 message. The vulnerability affects multiple versions of Junos OS and Junos Evolved as specified. There is no explicit vendor advisory or patch information provided in the input data. Exploits are not known to be in the wild at this time.
CVE-2026-102016 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the rpd process. It involves improper validation of specified quantity in input related to BGP MVPN signaling updates, allowing a configured BGP MVPN peer to cause a denial of service. The vulnerability does not impact confidentiality or integrity but causes service disruption. Multiple affected version ranges are identified across Junos OS and Junos OS Evolved releases. No known exploits are reported in the wild. No patch links are provided, so patch status is not confirmed.
CVE-2026-102065 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). It involves improper validation of specified quantity in input, allowing a remote unauthenticated BGP peer to cause an rpd crash via a malformed BGP-signaled SRv6 service route when SRv6 dynamic tunnels are enabled. This can lead to denial of service by crashing the routing daemon.
CVE-2026-102067 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved. It involves improper validation of specified quantity in input within the routing protocol daemon (rpd). An adjacent unauthenticated attacker can cause a denial of service by sending a crafted RSVP packet when L2 LSP support is enabled.
CVE-2026-101995 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the l2ald daemon. It involves improper validation of specified quantity in input, allowing an adjacent attacker with access to an ICCP peer session to cause memory disclosure and disruption of the l2ald daemon via malformed ICCP packets. The vulnerability does not impact confidentiality or integrity but can cause availability disruption. Multiple versions of Junos OS and Junos OS Evolved are affected, with no explicit patch information provided.
CVE-2026-101985 is a medium severity vulnerability in Juniper Networks Junos OS Evolved on PTX Series devices. It involves improper validation of specified quantity in input within the routing protocol daemon (rpd). An unauthenticated IS-IS peer can exploit this flaw to cause a denial of service (DoS) condition. The vulnerability does not impact confidentiality or integrity but affects availability. Multiple specific versions of Junos OS Evolved are affected. No explicit patch or remediation details are provided in the available data.
CVE-2026-107434 is a medium severity vulnerability in videowhisper MicroPayments versions up to 3.2.9. It involves improper validation of specified quantity in input, leading to a subscriber bypass issue. This flaw could allow an attacker with low privileges to cause limited integrity and availability impacts without user interaction.
A heap-based buffer overflow vulnerability exists in the Apache DataSketches C++ library during deserialization of HLL sketches in LIST mode. The flaw occurs because the coupon count from untrusted input is used to copy entries into a fixed-size buffer of 8 entries without proper bounds checking. This can lead to a write of up to 988 bytes beyond the buffer, corrupting heap memory and potentially causing crashes or further exploitation. The issue affects versions from 1.0.0-incubating up to 5.2.0. Upgrading to version 5.3.0 resolves the vulnerability.
vLLM versions prior to 0.30.0 contain an improper input validation vulnerability in the /inference/v1/generate endpoint. This flaw allows crafted inputs in several fields to cause termination of the shared EngineCore, poison or retrieve cross-request encoder-cache state, and alter replayed transport semantics. The issue is resolved in version 0.30.0.
CVE-2026-103065 is a high severity vulnerability in Themeum Kirki up to version 6.3.1. It involves improper validation of specified quantity in input, leading to access of functionality not properly constrained by access control lists (ACLs). This could allow unauthorized users to access certain features or functions. The vulnerability has a CVSS score of 8.2, indicating a significant impact on confidentiality with limited impact on integrity and no impact on availability.
CVE-2026-94636 is a high-severity vulnerability in Apache Thrift's Python bindings affecting versions before 0.25.0. It involves improper handling of highly compressed data leading to data amplification, incorrect function call arguments, and improper validation of input quantities. The issue is fixed in Apache Thrift version 0.25.0.
CVE-2026-94646 is a high-severity vulnerability in Apache Thrift's Node.js bindings affecting versions before 0.25.0. It involves uncaught exceptions, improper validation of input quantities, and prototype pollution due to improperly controlled modification of object prototype attributes. This vulnerability can lead to significant security risks if exploited. Users are advised to upgrade to version 0.25.0, which addresses and fixes the issue.
CVE-2026-94645 is a high-severity vulnerability in Apache Thrift's Node.js bindings involving improper validation of specified quantity in input, leading to allocation of resources without limits or throttling. This flaw affects all versions before 0.25.0. The issue is fixed in version 0.25.0, and users are advised to upgrade to this version to mitigate the risk.
CVE-2026-91137 is a high-severity vulnerability in Apache Thrift before version 0.25.0. It involves improper validation of specified quantity in input, leading to allocation of resources without limits or throttling and excessive iteration in the PHP bindings. This can cause resource exhaustion or denial of service. The issue is fixed in Apache Thrift version 0.25.0.