Topic
CVE
5 stories about CVE that passed the news check, newest first.
Security · High impact ·
CVE-2026-85108: Apache James MIME4J: Denial of service due to Allocation of Resources Without Limits or Throttling
CVE-2026-85108 is a denial-of-service flaw caused by allocation of resources without limits or throttling in Apache James MIME4J.
Open Source Security
Security · High impact ·
CVE-2026-90436: Apache Axis 1.x (EOL): unauthenticated remote class instantiation via SOAP fault exceptionName
CVE-2026-90436 affects Apache Axis 1.x (end-of-life) through version 1.4.
Open Source Security
Security ·
Xen Security Advisory 526 v1 (CVE-2026-100080) - Linux xen-netback: guest can trigger use-after-free for
Xen Security Advisory 526 (XSA-526, CVE-2026-100080) concerns the Linux xen-netback driver.
Open Source Security
Security ·
SourceHut disabled registration bypass | CVE-2026-121728
A registration bypass affecting SourceHut was disclosed and assigned CVE-2026-121728.
Lobsters
Security · High impact ·
U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Apple flaw, CVE-2024-27834, to its Known Exploited Vulnerabilities catalog.
Security Affairs