CVE-2026-119079 is a denial of service vulnerability in the MIT Kerberos 5 implementation used by Red Hat Enterprise Linux 10. The flaw occurs in the decode_sequence_of() function, which inefficiently grows an array one element at a time when decoding certain ASN.1 sequences. Remote attackers can exploit this by sending unauthenticated AS-REQ or TGS-REQ messages with large SEQUENCE OF fields over TCP, causing excessive CPU consumption in the Kerberos Key Distribution Center (KDC) daemon. This vulnerability does not allow data disclosure or code execution but can degrade KDC availability. Mitigation involves restricting TCP port 88 access to trusted networks using firewall rules.
CVE-2026-112323 is a denial of service vulnerability in the AUTH_GSSAPI handler of MIT Kerberos 5 (krb5) versions 1.5.2 and later. Remote attackers can cause memory exhaustion in the kadmind service by sending repeated failed AUTH_GSSAPI_INIT requests, which allocate client state that is only freed after a 15-minute timeout. This allows attackers to accumulate memory faster than it is reclaimed, potentially causing service disruption. The kadmind service is not enabled by default on standard Red Hat Enterprise Linux installations and is typically confined to Kerberos Key Distribution Center environments.
clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries.
NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon (amsd) that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS (MAMS) configuration management messages that are processed without cryptographic authentication. Attackers can exploit the insufficient buffer size calculation for the internal state-event object to crash the active Configuration Server thread, causing a denial of service and potentially destabilizing subsequent shared-memory allocations in amsd.
NASA JPL ION-DTN versions 3.6.2 through 4.2.0 contain a heap-based buffer overflow vulnerability in the Network Management daemon (nm_mgr). This flaw arises from unsafe string-formatting logic using unbounded strcat operations on deeply nested AMP payloads, allowing out-of-bounds writes. Exploitation can cause nm_mgr to crash, resulting in denial of service that halts telemetry collection and operator visibility.
A vulnerability in ansible-core's ansible.builtin.git module allows argument injection via repository URLs starting with a dash. This flaw occurs because the module invokes git commands without a '--' separator before the repository URL, causing git to interpret dash-leading URLs as command-line options. An attacker controlling the repository URL can exploit this to execute arbitrary commands on the host running the module.
A path traversal vulnerability exists in the Android implementation of the Flutter/Dart receive_sharing_intent package versions 1.4.1 through 1.9.0. This flaw allows a malicious co-resident app to write files outside the intended cache directory by supplying a crafted _display_name value from an untrusted ContentProvider. Exploitation enables file overwrite within the receiving application's private sandbox without user interaction.
During the Agent-Based Installation (ABI) bootstrap of OpenShift, the bootstrap node's approve-csr.service automatically approves and signs all Certificate Signing Requests (CSRs) without validating their identity. This allows an attacker with network access during the brief bootstrap window to retrieve an unauthenticated Ignition file, extract a limited kubeconfig, submit a CSR for the system:admin identity, and obtain a signed certificate granting full cluster-admin privileges.
A vulnerability in the rrule validation logic of the automation controller component in Red Hat Ansible Automation Platform allows an authenticated user to cause a denial of service. The issue arises from inefficient regular expressions that cause validation time to grow quadratically when expected tokens are missing. This can exhaust API web workers, denying access to the API and web UI. The impact is limited to availability with no confidentiality or integrity effects.
A reflected Cross-site Scripting (XSS) vulnerability exists in VideoWhisper.com Broadcast Live Video plugin versions up to 7.3.14. This flaw allows improper neutralization of input during web page generation, potentially enabling attackers to execute arbitrary scripts in users' browsers. The vulnerability has a high severity rating with a CVSS score of 7.1.
A stored cross-site scripting (XSS) vulnerability exists in Crocoblock JetFormBuilder versions up to 3.6.8. This vulnerability allows improper neutralization of input during web page generation, potentially enabling attackers to execute arbitrary scripts in the context of affected users.
Eclipse Langium versions 3.2.0 through 4.4.0 have an inefficient algorithmic complexity issue in the opt-in IndentationAwareTokenBuilder and IndentationAwareLexer components. The issue causes tokenization to take quadratic time for documents with frequent indentation changes, blocking the Node.js event loop and resulting in a denial of service. Languages using the default lexer and token builder are not affected.
The FrodoBots EarthRover Mini+ firmware version 6.2.4_6.2.5_0.614.0 runs all processes with root privileges without privilege separation. This design flaw means that if any single service is compromised, an attacker gains full administrative control over the device.
Redpanda Connect versions 4.39 through 4.110 have a missing authentication vulnerability in the management HTTP API exposed on 0.0.0.0:4195. This allows unauthenticated remote code execution (RCE) by posting malicious pipeline definitions containing code-executing processors. Starting with version 4.111, the API endpoint is disabled by default but can be enabled manually, retaining the RCE risk if enabled.
Tasmota firmware versions through 16.0.0 contain a heap out-of-bounds write vulnerability in the SendReceiveDeviceGroupMessage() function. This flaw allows unauthenticated attackers on the local network to send crafted UDP messages to port 4447, causing heap memory corruption by making a counter negative and exceeding a fixed buffer size. Exploitation can lead to device crashes or potentially native code execution on ESP8266 and ESP32 devices lacking certain memory protections. The vulnerability is fixed in a commit identified as e97e1e4.
Tasmota firmware versions through 16.0.0 contain a cross-site request forgery (CSRF) vulnerability that allows unauthenticated attackers to bypass Referer-based CSRF protections. By crafting a malicious Referer header that includes the device hostname or IP as a substring after a controlled domain, attackers can trick administrators into executing arbitrary console commands and reconfiguring device settings if no WebPassword is set.
The FrodoBots EarthRover Mini+ firmware version 6.2.4_6.2.5_0.614.0 exposes several local interfaces without authentication, including an HTTP REST API on port 80, ADB root shell access on port 5555, and SSH on port 22. These interfaces allow access to sensitive functions such as motor control, telemetry data, plaintext WiFi passwords, and diagnostic exports.
Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows have insufficient resource limits, which could allow an unauthenticated remote attacker to cause a denial of service condition.
An Incorrect Privilege Assignment vulnerability exists in AtlasAiDev MCP Server for WordPress ai-workflow-automation-ai-agent-hub, allowing privilege escalation. The vulnerability affects versions up to and including 2.0.1. It has a high severity with a CVSS score of 8.8, indicating a network attack vector with low complexity and no user interaction required. The vulnerability impacts confidentiality, integrity, and availability.
The FrodoBots EarthRover Mini+ firmware version 6.2.4_6.2.5_0.614.0 uses an insecure STM32 firmware update mechanism. Firmware updates are fetched over unencrypted HTTP, and integrity is only checked using MD5 hashes transmitted in the same unprotected response. There is no code-signing mechanism, allowing attackers to potentially replace the firmware with malicious code.