CVE ID :CVE-2026-113351 Published : Oct. 20, 2026, 11:17 a.m. | 49 minutes ago Description :libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML...

#Sicherheitslücke #DDoS

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-113351 - libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset

VERWANDTEARTIKEL

CVE-2026-113620 - Eclipse ioFog operator WebSocket accepts an unverified JWT

CVE-2026-113390 - DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection

CVE-2026-113391 - DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection

CVE-2026-105941 - Kroxylicious-kms-provider-azure-key-vault-kms: streams for apache kafka kroxylicious: azure key vault ssrf exfiltrates bearer token via untrusted edek vaultname

CVE-2026-105949 - Cruise-control: streams for apache kafka cruise control: authentication bypass via extra path segment allows unauthenticated access to all admin endpoints

CVE-2026-105312 - Console-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalation