Medium CVE-2026-40898 quic-go is an implementation of the QUIC protocol in Go. Prior to version 0.59.1, an attacker can cause excessive memory allocation in quic-go's HTTP/3 client and server implementations by sending a QPACK-encoded HEADERS frame that decodes into a large trailer field section...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

[Medium] CVE-2026-40898 – quic-go is an implementation of the QUIC protocol in Go. Prior to version 0.59.1...

VERWANDTEARTIKEL

CVE-2023-5502 - On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, a malicious supplicant may bypass authentication.

CVE-2024-27892 - On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (SSL Profiles Enabled).

[Medium] CVE-2026-42547 – IRIS is a web collaborative platform that helps incident responders share techni...

[High] CVE-2026-10871 – A vulnerability has been found in Shibby Tomato 1.28.0000. This vulnerability af...

[Medium] CVE-2026-11322 – Hermes WebUI prior to v0.51.221 contains a path traversal vulnerability that all...

CVE-2026-10871 - Shibby Tomato Web UI rc start_6rd_tunnel os command injection