Denial of Service Archives • Daily CyberSecurity

Apache Tomcat Vulnerabilities Fixed in 11.0.26 Update Diagram illustrating Apache Tomcat vulnerabilities including CVE-2026-87022

Apache Tomcat Vulnerabilities Fixed in 11.0.26 Update

Do Son September 23, 2026

TL;DR The Apache Software Foundation released version 11.0.26 to address 15 Apache Tomcat vulnerabilities. These flaws include...

NVIDIA Patches Triton Inference Server Vulnerabilities Critical Triton Inference Server vulnerabilities diagram showing denial of service risks

Critical Triton Inference Server vulnerabilities diagram showing denial of service risks

NVIDIA Patches Triton Inference Server Vulnerabilities

Do Son September 10, 2026

NVIDIA patched two high-severity security flaws in its AI inferencing platform on September 10, 2026. These critical...

MongoDB Patches 24 Server Vulnerabilities, One Critical MongoDB Server vulnerabilities dashboard showing a critical authorization bypass and unauthenticated denial of service flaws

MongoDB Server vulnerabilities dashboard showing a critical authorization bypass and unauthenticated denial of service flaws

MongoDB Patches 24 Server Vulnerabilities, One Critical

Do Son September 10, 2026

TL;DR MongoDB fixed 24 MongoDB Server vulnerabilities in recent releases. One critical flaw can leave authorization disabled...

Cisco Secure Email S/MIME Flaws Publicly Disclosed Cisco Secure Email vulnerability S/MIME ciphertext decryption flaws publicly disclosed plus Cisco phone SIP denial of service diagram

Cisco Secure Email vulnerability S/MIME ciphertext decryption flaws publicly disclosed plus Cisco phone SIP denial of service diagram

Cisco Secure Email S/MIME Flaws Publicly Disclosed

Do Son September 3, 2026

TL;DR Cisco published advisories for several product flaws on September 2, 2026. A public announcement already exists...

Apache Tomcat Patches 11 Vulnerabilities in 11.0.25 Update Apache Tomcat vulnerability patch in version 11.0.25 fixing authentication bypass and HTTP/2 denial of service flaws CVE-2026-68569

Apache Tomcat vulnerability patch in version 11.0.25 fixing authentication bypass and HTTP/2 denial of service flaws CVE-2026-68569

Apache Tomcat Patches 11 Vulnerabilities in 11.0.25 Update

Do Son August 26, 2026

TL;DR The Apache Tomcat team fixed 11 vulnerabilities on August 25, 2026. The batch includes three Important...

OpenSSL Security Update Patches 9 Denial-of-Service Flaws OpenSSL security update advisory patching nine denial-of-service vulnerabilities including QUIC double free CVE-2026-18798

OpenSSL security update advisory patching nine denial-of-service vulnerabilities including QUIC double free CVE-2026-18798

OpenSSL Security Update Patches 9 Denial-of-Service Flaws

Do Son August 25, 2026

TL;DR OpenSSL shipped a security update on August 25, 2026, fixing nine vulnerabilities. Two rank as Moderate,...

Spring Data REST and Spring AI Vulnerabilities: Four High-Severity Flaws Patched Spring vulnerabilities advisory covering Spring Data REST and Spring AI four high severity flaws CVE-2026-47849

Spring vulnerabilities advisory covering Spring Data REST and Spring AI four high severity flaws CVE-2026-47849

Spring Data REST and Spring AI Vulnerabilities: Four High-Severity Flaws Patched

Do Son August 21, 2026

TL;DR VMware disclosed four Spring vulnerabilities on August 20, 2026. All rate as HIGH severity. One hits...

CVE-2026-47627: CVSS 9.8 Denial of Service Hits NVIDIA Triton NVIDIA Triton vulnerability CVE-2026-47627 CVSS 9.8 denial of service advisory chart for the AI inference server

NVIDIA Triton vulnerability CVE-2026-47627 CVSS 9.8 denial of service advisory chart for the AI inference server

CVE-2026-47627: CVSS 9.8 Denial of Service Hits NVIDIA Triton

Do Son August 20, 2026

TL;DR NVIDIA patched a critical NVIDIA Triton vulnerability tracked as CVE-2026-47627. The flaw scores a CVSS base...

CVE-2026-71290: Apache HttpClient Flaw Lets Attackers Intercept and Modify Traffic (CVSS 9.1) Apache HttpClient TLS vulnerability CVE-2026-71290 MITM diagram

Apache HttpClient TLS vulnerability CVE-2026-71290 MITM diagram

CVE-2026-71290: Apache HttpClient Flaw Lets Attackers Intercept and Modify Traffic (CVSS 9.1)

Do Son August 18, 2026

TL;DR: Apache disclosed two Apache HttpClient TLS vulnerabilities in its HttpComponents Client library this month. The more...

Apache Struts Patches Five Flaws Including Unauthenticated DoS Bugs Apache Struts DoS flaws CVE-2026-73635 JSON plugin diagram

Apache Struts Patches Five Flaws Including Unauthenticated DoS Bugs

Do Son August 15, 2026

Apache patched five bugs in Struts 2 this week. Three of them count as Apache Struts DoS...

Cisco ASA and FTD VPN Flaw CVE-2026-20349 Exploited in the Wild Cisco ASA and FTD VPN vulnerability CVE-2026-20349 exploited in the wild causing a firewall denial of service reload

Cisco ASA and FTD VPN vulnerability CVE-2026-20349 exploited in the wild causing a firewall denial of service reload

Cisco ASA and FTD VPN Flaw CVE-2026-20349 Exploited in the Wild

Do Son August 12, 2026

TL;DR Cisco disclosed a Cisco ASA and FTD VPN vulnerability on August 11, 2026. Tracked as CVE-2026-20349...

Multiple ClamAV Flaws Let Remote Attackers Cause DoS ClamAV vulnerability multiple denial of service flaws in Cisco Secure Endpoint remote attacker crafted file scanning

ClamAV vulnerability multiple denial of service flaws in Cisco Secure Endpoint remote attacker crafted file scanning

Multiple ClamAV Flaws Let Remote Attackers Cause DoS

Do Son August 8, 2026

TL;DR Cisco disclosed seven ClamAV vulnerabilities on August 7, 2026. Each lets an unauthenticated remote attacker crash...

Erlang/OTP Patches Five Flaws, Including a TLS Certificate Bypass Erlang/OTP vulnerabilities including a TLS certificate bypass and BEAM VM denial-of-service crash flaws

Erlang/OTP vulnerabilities including a TLS certificate bypass and BEAM VM denial-of-service crash flaws

Erlang/OTP Patches Five Flaws, Including a TLS Certificate Bypass

Do Son July 31, 2026

TL;DR The Erlang/OTP team fixed five security flaws across the runtime and its TLS stack. The most...

MongoDB Patches 27 Vulnerabilities, Including Memory Corruption, RBAC Bypass, and a Compass Command Injection MongoDB vulnerabilities dashboard showing memory corruption and denial of service flaws across MongoDB Server and Compass

MongoDB vulnerabilities dashboard showing memory corruption and denial of service flaws across MongoDB Server and Compass

MongoDB Patches 27 Vulnerabilities, Including Memory Corruption, RBAC Bypass, and a Compass Command Injection

Do Son July 30, 2026

TL;DR MongoDB disclosed 27 vulnerabilities across MongoDB Server and the Compass GUI client. Most are denial-of-service bugs,...

Apache ActiveMQ Patches Authorization Bypass and DoS Flaws Apache ActiveMQ vulnerability alert covering authorization bypass and AMQP denial-of-service flaws

Apache ActiveMQ vulnerability alert covering authorization bypass and AMQP denial-of-service flaws

Apache ActiveMQ Patches Authorization Bypass and DoS Flaws

Do Son July 28, 2026

TL;DR The Apache Software Foundation fixed two Apache ActiveMQ vulnerabilities. One lets a low-privilege user bypass write...

HTTP/2 DoS Vulnerability Lets Attackers Exhaust Server Memory via Stalled Flow Control HTTP/2 DoS vulnerability caused by stalled flow control exhausting server memory across multiple HTTP/2 implementations

HTTP/2 DoS vulnerability caused by stalled flow control exhausting server memory across multiple HTTP/2 implementations

HTTP/2 DoS Vulnerability Lets Attackers Exhaust Server Memory via Stalled Flow Control

Do Son July 23, 2026

A newly disclosed HTTP/2 DoS vulnerability affects several server implementations at once. A remote, unauthenticated attacker can...

MOVEit Transfer Fixes Stored XSS and Two Other Vulnerabilities MOVEit Transfer stored XSS vulnerability CVE-2026-11903 patched in version 2026.0.1

MOVEit Transfer stored XSS vulnerability CVE-2026-11903 patched in version 2026.0.1

MOVEit Transfer Fixes Stored XSS and Two Other Vulnerabilities

Do Son July 9, 2026

TL;DR Progress released a MOVEit Transfer security bulletin on July 8, 2026. It fixes three flaws, and...

PHP Patches Remote DoS Flaw CVE-2026-12184 and an OpenSSL Memory Corruption Bug PHP remote DoS advisory graphic showing a PHP-FPM crash and openssl memory corruption

PHP remote DoS advisory graphic showing a PHP-FPM crash and openssl memory corruption

PHP Patches Remote DoS Flaw CVE-2026-12184 and an OpenSSL Memory Corruption Bug

Do Son July 6, 2026

TL;DR The PHP team fixed two flaws, including a PHP remote DoS that can crash a whole...

Apache ActiveMQ vulnerabilities causing denial of service and temporary destination takeover (CVE-2026-54475)

Apache ActiveMQ Vulnerabilities Allow Denial of Service and Takeover

Do Son July 3, 2026

TL;DR Apache patched nine Apache ActiveMQ vulnerabilities in version 6.2.7. Most cause denial of service, and several...

Apache HttpComponents Core Patches Two DoS Vulnerabilities in HTTP Parsers Apache HttpComponents Core vulnerabilities CVE-2026-54399 denial of service advisory

Apache HttpComponents Core vulnerabilities CVE-2026-54399 denial of service advisory

Apache HttpComponents Core Patches Two DoS Vulnerabilities in HTTP Parsers

Do Son July 2, 2026

TL;DR The Apache Software Foundation has disclosed two Apache HttpComponents Core vulnerabilities, CVE-2026-54399 and CVE-2026-54428. Both carry...

Six NetScaler Vulnerabilities Allow Denial of Service and File Read NetScaler vulnerabilities causing denial of service, memory overread, and unauthenticated file read on NetScaler ADC and Gateway