Denial of Service Archives • Daily CyberSecurity

Cisco Secure Email S/MIME Flaws Publicly Disclosed Cisco Secure Email vulnerability S/MIME ciphertext decryption flaws publicly disclosed plus Cisco phone SIP denial of service diagram

Cisco Secure Email vulnerability S/MIME ciphertext decryption flaws publicly disclosed plus Cisco phone SIP denial of service diagram

Cisco Secure Email S/MIME Flaws Publicly Disclosed

Do Son September 3, 2026

TL;DR Cisco published advisories for several product flaws on September 2, 2026. A public announcement already exists...

Apache Tomcat Patches 11 Vulnerabilities in 11.0.25 Update Apache Tomcat vulnerability patch in version 11.0.25 fixing authentication bypass and HTTP/2 denial of service flaws CVE-2026-68569

Apache Tomcat vulnerability patch in version 11.0.25 fixing authentication bypass and HTTP/2 denial of service flaws CVE-2026-68569

Apache Tomcat Patches 11 Vulnerabilities in 11.0.25 Update

Do Son August 26, 2026

TL;DR The Apache Tomcat team fixed 11 vulnerabilities on August 25, 2026. The batch includes three Important...

OpenSSL Security Update Patches 9 Denial-of-Service Flaws OpenSSL security update advisory patching nine denial-of-service vulnerabilities including QUIC double free CVE-2026-18798

OpenSSL security update advisory patching nine denial-of-service vulnerabilities including QUIC double free CVE-2026-18798

OpenSSL Security Update Patches 9 Denial-of-Service Flaws

Do Son August 25, 2026

TL;DR OpenSSL shipped a security update on August 25, 2026, fixing nine vulnerabilities. Two rank as Moderate,...

Spring Data REST and Spring AI Vulnerabilities: Four High-Severity Flaws Patched Spring vulnerabilities advisory covering Spring Data REST and Spring AI four high severity flaws CVE-2026-47849

Spring vulnerabilities advisory covering Spring Data REST and Spring AI four high severity flaws CVE-2026-47849

Spring Data REST and Spring AI Vulnerabilities: Four High-Severity Flaws Patched

Do Son August 21, 2026

TL;DR VMware disclosed four Spring vulnerabilities on August 20, 2026. All rate as HIGH severity. One hits...

CVE-2026-47627: CVSS 9.8 Denial of Service Hits NVIDIA Triton NVIDIA Triton vulnerability CVE-2026-47627 CVSS 9.8 denial of service advisory chart for the AI inference server

NVIDIA Triton vulnerability CVE-2026-47627 CVSS 9.8 denial of service advisory chart for the AI inference server

CVE-2026-47627: CVSS 9.8 Denial of Service Hits NVIDIA Triton

Do Son August 20, 2026

TL;DR NVIDIA patched a critical NVIDIA Triton vulnerability tracked as CVE-2026-47627. The flaw scores a CVSS base...

CVE-2026-71290: Apache HttpClient Flaw Lets Attackers Intercept and Modify Traffic (CVSS 9.1) Apache HttpClient TLS vulnerability CVE-2026-71290 MITM diagram

Apache HttpClient TLS vulnerability CVE-2026-71290 MITM diagram

CVE-2026-71290: Apache HttpClient Flaw Lets Attackers Intercept and Modify Traffic (CVSS 9.1)

Do Son August 18, 2026

TL;DR: Apache disclosed two Apache HttpClient TLS vulnerabilities in its HttpComponents Client library this month. The more...

Apache Struts Patches Five Flaws Including Unauthenticated DoS Bugs Apache Struts DoS flaws CVE-2026-73635 JSON plugin diagram

Apache Struts Patches Five Flaws Including Unauthenticated DoS Bugs

Do Son August 15, 2026

Apache patched five bugs in Struts 2 this week. Three of them count as Apache Struts DoS...

Cisco ASA and FTD VPN Flaw CVE-2026-20349 Exploited in the Wild Cisco ASA and FTD VPN vulnerability CVE-2026-20349 exploited in the wild causing a firewall denial of service reload

Cisco ASA and FTD VPN vulnerability CVE-2026-20349 exploited in the wild causing a firewall denial of service reload

Cisco ASA and FTD VPN Flaw CVE-2026-20349 Exploited in the Wild

Do Son August 12, 2026

TL;DR Cisco disclosed a Cisco ASA and FTD VPN vulnerability on August 11, 2026. Tracked as CVE-2026-20349...

Multiple ClamAV Flaws Let Remote Attackers Cause DoS ClamAV vulnerability multiple denial of service flaws in Cisco Secure Endpoint remote attacker crafted file scanning

ClamAV vulnerability multiple denial of service flaws in Cisco Secure Endpoint remote attacker crafted file scanning

Multiple ClamAV Flaws Let Remote Attackers Cause DoS

Do Son August 8, 2026

TL;DR Cisco disclosed seven ClamAV vulnerabilities on August 7, 2026. Each lets an unauthenticated remote attacker crash...

Erlang/OTP Patches Five Flaws, Including a TLS Certificate Bypass Erlang/OTP vulnerabilities including a TLS certificate bypass and BEAM VM denial-of-service crash flaws

Erlang/OTP vulnerabilities including a TLS certificate bypass and BEAM VM denial-of-service crash flaws

Erlang/OTP Patches Five Flaws, Including a TLS Certificate Bypass

Do Son July 31, 2026

TL;DR The Erlang/OTP team fixed five security flaws across the runtime and its TLS stack. The most...

MongoDB Patches 27 Vulnerabilities, Including Memory Corruption, RBAC Bypass, and a Compass Command Injection MongoDB vulnerabilities dashboard showing memory corruption and denial of service flaws across MongoDB Server and Compass

MongoDB vulnerabilities dashboard showing memory corruption and denial of service flaws across MongoDB Server and Compass

MongoDB Patches 27 Vulnerabilities, Including Memory Corruption, RBAC Bypass, and a Compass Command Injection

Do Son July 30, 2026

TL;DR MongoDB disclosed 27 vulnerabilities across MongoDB Server and the Compass GUI client. Most are denial-of-service bugs,...

Apache ActiveMQ Patches Authorization Bypass and DoS Flaws Apache ActiveMQ vulnerability alert covering authorization bypass and AMQP denial-of-service flaws

Apache ActiveMQ vulnerability alert covering authorization bypass and AMQP denial-of-service flaws

Apache ActiveMQ Patches Authorization Bypass and DoS Flaws

Do Son July 28, 2026

TL;DR The Apache Software Foundation fixed two Apache ActiveMQ vulnerabilities. One lets a low-privilege user bypass write...

HTTP/2 DoS Vulnerability Lets Attackers Exhaust Server Memory via Stalled Flow Control HTTP/2 DoS vulnerability caused by stalled flow control exhausting server memory across multiple HTTP/2 implementations

HTTP/2 DoS vulnerability caused by stalled flow control exhausting server memory across multiple HTTP/2 implementations

HTTP/2 DoS Vulnerability Lets Attackers Exhaust Server Memory via Stalled Flow Control

Do Son July 23, 2026

A newly disclosed HTTP/2 DoS vulnerability affects several server implementations at once. A remote, unauthenticated attacker can...

MOVEit Transfer Fixes Stored XSS and Two Other Vulnerabilities MOVEit Transfer stored XSS vulnerability CVE-2026-11903 patched in version 2026.0.1

MOVEit Transfer stored XSS vulnerability CVE-2026-11903 patched in version 2026.0.1

MOVEit Transfer Fixes Stored XSS and Two Other Vulnerabilities

Do Son July 9, 2026

TL;DR Progress released a MOVEit Transfer security bulletin on July 8, 2026. It fixes three flaws, and...

PHP Patches Remote DoS Flaw CVE-2026-12184 and an OpenSSL Memory Corruption Bug PHP remote DoS advisory graphic showing a PHP-FPM crash and openssl memory corruption

PHP remote DoS advisory graphic showing a PHP-FPM crash and openssl memory corruption

PHP Patches Remote DoS Flaw CVE-2026-12184 and an OpenSSL Memory Corruption Bug

Do Son July 6, 2026

TL;DR The PHP team fixed two flaws, including a PHP remote DoS that can crash a whole...

Apache ActiveMQ vulnerabilities causing denial of service and temporary destination takeover (CVE-2026-54475)

Apache ActiveMQ Vulnerabilities Allow Denial of Service and Takeover

Do Son July 3, 2026

TL;DR Apache patched nine Apache ActiveMQ vulnerabilities in version 6.2.7. Most cause denial of service, and several...

Apache HttpComponents Core Patches Two DoS Vulnerabilities in HTTP Parsers Apache HttpComponents Core vulnerabilities CVE-2026-54399 denial of service advisory

Apache HttpComponents Core vulnerabilities CVE-2026-54399 denial of service advisory

Apache HttpComponents Core Patches Two DoS Vulnerabilities in HTTP Parsers

Do Son July 2, 2026

TL;DR The Apache Software Foundation has disclosed two Apache HttpComponents Core vulnerabilities, CVE-2026-54399 and CVE-2026-54428. Both carry...

Six NetScaler Vulnerabilities Allow Denial of Service and File Read NetScaler vulnerabilities causing denial of service, memory overread, and unauthenticated file read on NetScaler ADC and Gateway

NetScaler vulnerabilities causing denial of service, memory overread, and unauthenticated file read on NetScaler ADC and Gateway

Six NetScaler Vulnerabilities Allow Denial of Service and File Read

Do Son June 30, 2026

TL;DR Cloud Software Group patched six NetScaler vulnerabilities in NetScaler ADC and NetScaler Gateway. Three rate CVSS...

Langflow File Upload Flaw: Details and PoC Exploit Publicly Disclosed (CVE-2026-55450) Langflow file upload flaw enabling unauthenticated denial-of-service and path leak (CVE-2026-55450)

Langflow file upload flaw enabling unauthenticated denial-of-service and path leak (CVE-2026-55450)

Langflow File Upload Flaw: Details and PoC Exploit Publicly Disclosed (CVE-2026-55450)

Do Son June 19, 2026

Unauthenticated upload exposes Langflow servers A newly published Langflow file upload flaw lets anyone with network...

Rockwell Automation patches multiple ICS flaws Rockwell Automation vulnerabilities in FactoryTalk Historian and FLEX I/O EtherNet/IP adapters

Rockwell Automation vulnerabilities in FactoryTalk Historian and FLEX I/O EtherNet/IP adapters

Rockwell Automation patches multiple ICS flaws

Do Son June 19, 2026

Rockwell Automation has disclosed two security advisories that reveal several Rockwell Automation vulnerabilities across its industrial product...

Spring framework security vulnerabilities authentication bypass threat

Spring Framework Security Vulnerabilities Addressed in Critical Maintenance Updates

Do Son June 9, 2026

Multiple Flaws Threaten Enterprise Java Deployments Across Clusters The enterprise development team managing the Java cloud ecosystem...

Emergency Patch Release Secures Apache HTTP Server Deployments Against Remote Attacks Apache HTTP Server patches buffer overflow vulnerabilities CVE-2022-36760

Apache HTTP Server patches buffer overflow vulnerabilities CVE-2022-36760

Emergency Patch Release Secures Apache HTTP Server Deployments Against Remote Attacks

Do Son June 9, 2026

Multiple Memory Exploits Resolved in Major Version 2.4.68 Maintenance Cycle The development group managing the global web...