CVE-2026-23991 is a medium severity vulnerability in go-tuf, a Go implementation of The Update Framework (TUF). Versions from 2.0.0 up to but not including 2.3.1 are affected. The vulnerability arises when the TUF repository or its mirrors return invalid but syntactically correct JSON metadata that is not well-formed according to TUF specifications. This causes the client to panic during parsing before signature validation, resulting in a denial of service (DoS). An attacker controlling a repository, mirror, or cache can exploit this without needing signing keys. No user interaction or authentication is required, and no known workarounds exist.
CVE-2026-21910 is a medium-severity vulnerability in Juniper Networks Junos OS affecting EX4k and QFX5k Series platforms that support EVPN-VXLAN VPLAG configurations. An unauthenticated network-adjacent attacker can cause a denial of service by flapping an interface, which leads to traffic drops between VXLAN Network Identifiers (VNIs). The issue arises when multiple load-balanced next-hop routes exist for the same destination and a link flap occurs in an EVPN-VXLAN LAG. Recovery requires manual restart of the affected FPC slot. The vulnerability affects multiple Junos OS versions prior to specific patched releases. No known exploits are currently reported in the wild. Defenders should prioritize patching affected devices and consider network design adjustments to mitigate impact.
CVE-2025-60011 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). An unauthenticated, network-based attacker can send a crafted optional, transitive BGP attribute that is improperly checked and modified by the affected device before propagation. This causes peers to detect malformed attributes and likely terminate BGP sessions, resulting in routing instability and availability impact. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patched releases. Exploitation does not require authentication or user interaction but can cause significant network disruption. No known exploits are currently reported in the wild. European organizations relying on Juniper routing infrastructure could experience network outages and degraded service availability. Mitigation requires timely patching to fixed Junos OS versions. Countries with high Juniper market penetration and critical network infrastructure are most at risk.
CVE-2025-59960 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the DHCP relay agent. The flaw allows a DHCP client in one subnet to exhaust DHCP address pools of other subnets by exploiting improper handling of DHCP Option 82 in 'forward-only' mode. This leads to denial of service (DoS) on downstream DHCP servers by depleting available IP addresses. The vulnerability affects multiple Junos OS versions prior to various fixed releases starting from 21.2R3-S10 and corresponding Junos OS Evolved versions. Exploitation requires network access but no authentication or user interaction, with a CVSS score of 7.4. No known exploits are currently reported in the wild. European organizations using vulnerable Juniper devices should prioritize patching and consider network segmentation and DHCP relay configuration hardening to mitigate risk.
A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode.
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in `CIccSegmentedCurveXml::ToXml()` at `IccXML/IccLibXML/IccMpeXml.cpp`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in `CIccProfileXml::ParseBasic()` at `IccXML/IccLibXML/IccProfileXml.cpp`. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01311265; Issue ID: MSV-4655.
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause an improper check for unusual or exceptional conditions issue by sending extra large payloads. A successful exploit of this vulnerability may lead to denial of service.
WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to version 2.4.4, WAMR is susceptible to a segmentation fault in v128.store instruction. This issue has been patched in version 2.4.4.
An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD.
This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1.
Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Drupal core allows Forceful Browsing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8.
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. When the ESP32 is in advertising mode, if it receives a connection request containing an invalid Access Address (AA) of 0x00000000 or 0xFFFFFFFF, advertising may stop unexpectedly. In this case, the controller may incorrectly report a connection event to the host, which can cause the application layer to assume that the device has successfully established a connection. This issue has been fixed in versions 5.5.2, 5.4.3, 5.3.5, 5.2.6, and 5.1.7. At time of publication versions 5.5.2, 5.3.5, and 5.1.7 have not been released but are fixed respectively in commits 3b95b50, e3d7042, and 75967b5.
A denial-of-service (DoS) vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to reboot a firewall by sending a specially crafted packet through the dataplane. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode.
This issue is applicable to the PAN-OS software versions listed below on PA-Series firewalls, VM-Series firewalls, and Prisma® Access software. This issue does not affect Cloud NGFW.
We have successfully completed the Prisma Access upgrade for all customers, with the exception of those facing issues such as conflicting maintenance windows. Remaining customers will be promptly scheduled for an upgrade through our standard upgrade process.
The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access violations.
Oxford Nanopore Technologies' MinKNOW software at or prior to version 24.11 creates a temporary file to store the local authentication token during startup, before copying it to its final location. This temporary file is created in a directory accessible to all users on the system. An unauthorized local user or process can exploit this behavior by placing a file lock on the temporary token file using the flock system call. This prevents MinKNOW from completing the token generation process. As a result, no valid local token is created, and the software is unable to execute commands on the sequencer. This leads to a denial-of-service (DoS) condition, blocking sequencing operations.
Incorrect Content-Type header in one of the APIs (`text/html` instead of `application/json`) replies may potentially allow injection of HTML/JavaScript into reply.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial-Of-Service (DoS).
When an affected system receives a specific BGP EVPN update message over an established BGP session, this causes an rpd crash and restart.
A BGP EVPN configuration is not necessary to be vulnerable. If peers are not configured to send BGP EVPN updates to a vulnerable device, then this issue can't occur.
This issue affects iBGP and eBGP, over IPv4 and IPv6.
This issue affects:
Junos OS:
* 23.4 versions from
23.4R2-S3 before 23.4R2-S5,
* 24.2 versions from
24.2R2
before 24.2R2-S1,
* 24.4 versions before 24.4R1-S3, 24.4R2;
Junos OS Evolved:
* 23.4-EVO versions from 23.4R2-S2-EVO before 23.4R2-S5-EVO,
* 24.2-EVO versions from 24.2R2-EVO before 24.2R2-S1-EVO,
* 24.4-EVO versions before 24.4R1-S3-EVO, 24.4R2-EVO.