Skip to main content

CWE-606

Unchecked Input for Loop Condition

30 CVEs Avg CVSS 6.4 MITRE
0
CRITICAL
10
HIGH
19
MEDIUM
1
LOW
5
POC
0
KEV

Monthly

CVE-2026-13761 Aug 28, 13:11 HIGH This Week

Pega Platform (marketed as Pega Infinity) versions 7.1.0 through 25.1.2 expose a network-accessible, unauthenticated attack surface via CWE-606 (Unchecked Input for Loop Condition), where attacker-controlled input can trigger unbounded loop execution. The CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:N) confirms exploitation requires no privileges or user interaction, with vendor-assigned impacts of high integrity and high availability loss on the vulnerable system plus residual availability impact on downstream systems. No public exploit code and no CISA KEV listing were identified at time of analysis, but the low-complexity, unauthenticated network exposure makes this a credible denial-of-service risk for any internet-reachable Pega deployment in the affected version range.

Denial Of Service Pega Infinity
NVD
CVSS 4.0
8.8
EPSS
0.3%
CVE-2026-16599 Aug 25, 14:17 MEDIUM PATCH This Month

Denial of service in GNU wget's FTP OPIE/S-KEY authentication handler allows a malicious or intercepted FTP server to cause wget to perform approximately 2.1 billion MD5 computations by supplying a crafted sequence number near INT_MAX in the OPIE challenge line. All versions of GNU wget with OPIE/S-KEY FTP authentication support are affected per CPE cpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*. The --timeout option provides no mitigation because it governs network I/O exclusively, not CPU-bound computation. No public exploit identified at time of analysis; a fix is confirmed via upstream GitLab commit.

Denial Of Service Wget Red Hat Suse
NVD
CVSS 4.0
5.1
EPSS
0.4%
CVE-2026-62901 Aug 11, 17:18 NuGet HIGH POC PATCH GHSA Exploit Unlikely This Week

Denial-of-service in Microsoft .NET runtimes and Visual Studio allows unauthenticated remote attackers to crash or hang .NET applications by supplying crafted input that exploits an unchecked loop termination condition. Affected are .NET 8.0 (all releases through 8.0.29), .NET 9.0 (through 9.0.18), .NET 10.0 (through 10.0.10), and bundled Visual Studio 2022 and 2026 installations. No public exploit has been identified at time of analysis, but the low attack complexity and lack of authentication requirement make this a credible automated threat against any internet-exposed .NET service. Vendor-released patches are available and should be applied promptly, particularly for externally reachable endpoints. Note: the ENISA EUVD tags this as 'Authentication Bypass,' which conflicts with the description and CVSS impact metrics (C:N/I:N/A:H); this discrepancy should be verified with Microsoft's advisory.

Authentication Bypass Visual Studio 2022 Visual Studio 2026 Net Red Hat +1
NVD GitHub HeroDevs VulDB
CVSS 3.1
7.5
EPSS
1.1%
CVE-2026-71439 Aug 06, 20:01 npm MEDIUM POC PATCH GHSA This Month

Denial-of-service in Mermaid's radar-beta diagram renderer allows an attacker who can supply diagram input to trigger unbounded CPU and memory consumption by setting the `ticks` parameter to an arbitrarily large integer. Affected npm package versions >= 11.6.0 and < 11.16.1 perform no upper-bound validation on the `ticks` value, causing the JavaScript process - whether a browser tab or a server-side renderer - to freeze indefinitely until the OS terminates it due to OOM. A proof-of-concept is publicly available in the advisory. No KEV listing exists and no EPSS score is provided.

Information Disclosure Red Hat Suse
NVD GitHub
CVSS 4.0
5.3
EPSS
0.4%
CVE-2026-20301 Aug 05, 16:28 HIGH This Week

Denial-of-service via malformed XMCP packets forces unexpected reloads of Cisco IOS and IOS XE devices, exploitable by any remote unauthenticated attacker. The CVSS scope change (S:C) reflects that the reload impacts the entire device, not just the XMCP subsystem, bringing down all services simultaneously. No public exploit or CISA KEV listing exists at time of analysis, but the zero-authentication, low-complexity attack vector - combined with Cisco's ubiquitous enterprise footprint - makes this a high-priority patching target for network operations teams.

Denial Of Service Apple Cisco Cisco Ios Xe Software
NVD
CVSS 3.1
8.6
EPSS
0.3%
CVE-2026-66276 Aug 05, 05:39 MEDIUM This Month

Denial of service in Apache Qpid Proton-J through 0.34.1 allows authenticated AMQP clients to exhaust server CPU by sending a crafted disposition frame carrying large or illegal delivery ranges. The library's naive range handling iterates without bounds validation, causing unbounded CPU consumption that can starve legitimate connections. No public exploit identified at time of analysis; vendor-released fix is available in version 0.35.0.

Apache Denial Of Service Apache Qpid Proton J
NVD VulDB
CVSS 3.1
6.5
EPSS
0.2%
CVE-2026-67554 Aug 04, 19:15 MEDIUM This Month

Denial of service in Apache Qpid Proton-Dotnet through 1.0.0 allows an authenticated AMQP peer to exhaust CPU resources on the target host by sending a crafted disposition frame containing large or illegal delivery ranges. The library's naive range-iteration logic processes these unbounded ranges without safeguards, causing the consuming thread to spin and starve legitimate message processing. Vendor-released patch version 1.1.0 is available; no public exploit or CISA KEV listing has been identified at time of analysis.

Apache Denial Of Service Qpid Proton Dotnet
NVD VulDB
CVSS 3.1
6.5
EPSS
0.2%
CVE-2026-68077 Aug 04, 18:59 MEDIUM This Month

Denial of service in Apache Qpid Broker-J through version 10.0.1 allows authenticated AMQP 1.0 clients to exhaust broker CPU resources by sending crafted disposition frames containing large or illegal delivery-ID ranges. The broker's naive range iteration logic processes these ranges without bounds enforcement, causing excessive CPU consumption that degrades or halts message brokering for all connected clients. No public exploit code and no confirmed active exploitation are known at time of analysis; vendor-released fix 10.1.0 is available.

Apache Denial Of Service Qpid Broker J
NVD
CVSS 3.1
6.5
EPSS
0.2%
CVE-2026-55731 Jul 24, 14:00 MEDIUM This Month

Persistent denial of service in Loytec LIP-ME201C and related building automation controllers through version 8.4.16 allows unauthenticated remote attackers to cause CPU exhaustion via a crafted SNMP GETNEXT request with a large OID component. This vulnerability, tracked as CVE-2026-55731 and assigned CVSS 4.0 base score 6.6, has an EPSS exploitation probability of 0.32% and is not known to be actively exploited at analysis time.

Denial Of Service Lip Me20Xc L Inx L Gate L Roc +4
NVD
CVSS 4.0
6.6
EPSS
0.3%
CVE-2026-33800 Jul 09, 21:16 HIGH PATCH This Week

Denial-of-service in the Packet Forwarding Engine of Juniper Junos OS on MX Series routers allows an unauthenticated, network-adjacent attacker to crash and restart the FPC by continuously flapping Micro-BFD sessions. The PFEMAN process queues each up/down event and, in a Virtual-Chassis deployment with locality-bias enabled, processing is slow enough that a sustained flap backlog prevents completion and trips the PFEMAN watchdog timer, forcing an FPC restart and a full traffic outage. No public exploit identified at time of analysis and the issue is not in CISA KEV, but the low complexity and unauthenticated adjacent vector make it a credible availability threat to affected line cards (MPC9 and below).

Juniper Denial Of Service Junos
NVD VulDB
CVSS 4.0
7.1
EPSS
0.3%
EPSS 0% CVSS 8.8
HIGH This Week

Pega Platform (marketed as Pega Infinity) versions 7.1.0 through 25.1.2 expose a network-accessible, unauthenticated attack surface via CWE-606 (Unchecked Input for Loop Condition), where attacker-controlled input can trigger unbounded loop execution. The CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:N) confirms exploitation requires no privileges or user interaction, with vendor-assigned impacts of high integrity and high availability loss on the vulnerable system plus residual availability impact on downstream systems. No public exploit code and no CISA KEV listing were identified at time of analysis, but the low-complexity, unauthenticated network exposure makes this a credible denial-of-service risk for any internet-reachable Pega deployment in the affected version range.

Denial Of Service Pega Infinity
NVD
EPSS 0% CVSS 5.1
MEDIUM PATCH This Month

Denial of service in GNU wget's FTP OPIE/S-KEY authentication handler allows a malicious or intercepted FTP server to cause wget to perform approximately 2.1 billion MD5 computations by supplying a crafted sequence number near INT_MAX in the OPIE challenge line. All versions of GNU wget with OPIE/S-KEY FTP authentication support are affected per CPE cpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*. The --timeout option provides no mitigation because it governs network I/O exclusively, not CPU-bound computation. No public exploit identified at time of analysis; a fix is confirmed via upstream GitLab commit.

Denial Of Service Wget Red Hat +1
NVD
EPSS 1% CVSS 7.5
HIGH POC PATCH Exploit Unlikely This Week

Denial-of-service in Microsoft .NET runtimes and Visual Studio allows unauthenticated remote attackers to crash or hang .NET applications by supplying crafted input that exploits an unchecked loop termination condition. Affected are .NET 8.0 (all releases through 8.0.29), .NET 9.0 (through 9.0.18), .NET 10.0 (through 10.0.10), and bundled Visual Studio 2022 and 2026 installations. No public exploit has been identified at time of analysis, but the low attack complexity and lack of authentication requirement make this a credible automated threat against any internet-exposed .NET service. Vendor-released patches are available and should be applied promptly, particularly for externally reachable endpoints. Note: the ENISA EUVD tags this as 'Authentication Bypass,' which conflicts with the description and CVSS impact metrics (C:N/I:N/A:H); this discrepancy should be verified with Microsoft's advisory.

Authentication Bypass Visual Studio 2022 Visual Studio 2026 +3
NVD GitHub HeroDevs VulDB
EPSS 0% CVSS 5.3
MEDIUM POC PATCH This Month

Denial-of-service in Mermaid's radar-beta diagram renderer allows an attacker who can supply diagram input to trigger unbounded CPU and memory consumption by setting the `ticks` parameter to an arbitrarily large integer. Affected npm package versions >= 11.6.0 and < 11.16.1 perform no upper-bound validation on the `ticks` value, causing the JavaScript process - whether a browser tab or a server-side renderer - to freeze indefinitely until the OS terminates it due to OOM. A proof-of-concept is publicly available in the advisory. No KEV listing exists and no EPSS score is provided.

Information Disclosure Red Hat Suse
NVD GitHub
EPSS 0% CVSS 8.6
HIGH This Week

Denial-of-service via malformed XMCP packets forces unexpected reloads of Cisco IOS and IOS XE devices, exploitable by any remote unauthenticated attacker. The CVSS scope change (S:C) reflects that the reload impacts the entire device, not just the XMCP subsystem, bringing down all services simultaneously. No public exploit or CISA KEV listing exists at time of analysis, but the zero-authentication, low-complexity attack vector - combined with Cisco's ubiquitous enterprise footprint - makes this a high-priority patching target for network operations teams.

Denial Of Service Apple Cisco +1
NVD
EPSS 0% CVSS 6.5
MEDIUM This Month

Denial of service in Apache Qpid Proton-J through 0.34.1 allows authenticated AMQP clients to exhaust server CPU by sending a crafted disposition frame carrying large or illegal delivery ranges. The library's naive range handling iterates without bounds validation, causing unbounded CPU consumption that can starve legitimate connections. No public exploit identified at time of analysis; vendor-released fix is available in version 0.35.0.

Apache Denial Of Service Apache Qpid Proton J
NVD VulDB
EPSS 0% CVSS 6.5
MEDIUM This Month

Denial of service in Apache Qpid Proton-Dotnet through 1.0.0 allows an authenticated AMQP peer to exhaust CPU resources on the target host by sending a crafted disposition frame containing large or illegal delivery ranges. The library's naive range-iteration logic processes these unbounded ranges without safeguards, causing the consuming thread to spin and starve legitimate message processing. Vendor-released patch version 1.1.0 is available; no public exploit or CISA KEV listing has been identified at time of analysis.

Apache Denial Of Service Qpid Proton Dotnet
NVD VulDB
EPSS 0% CVSS 6.5
MEDIUM This Month

Denial of service in Apache Qpid Broker-J through version 10.0.1 allows authenticated AMQP 1.0 clients to exhaust broker CPU resources by sending crafted disposition frames containing large or illegal delivery-ID ranges. The broker's naive range iteration logic processes these ranges without bounds enforcement, causing excessive CPU consumption that degrades or halts message brokering for all connected clients. No public exploit code and no confirmed active exploitation are known at time of analysis; vendor-released fix 10.1.0 is available.

Apache Denial Of Service Qpid Broker J
NVD
EPSS 0% CVSS 6.6
MEDIUM This Month

Persistent denial of service in Loytec LIP-ME201C and related building automation controllers through version 8.4.16 allows unauthenticated remote attackers to cause CPU exhaustion via a crafted SNMP GETNEXT request with a large OID component. This vulnerability, tracked as CVE-2026-55731 and assigned CVSS 4.0 base score 6.6, has an EPSS exploitation probability of 0.32% and is not known to be actively exploited at analysis time.

Denial Of Service Lip Me20Xc L Inx +6
NVD
EPSS 0% CVSS 7.1
HIGH PATCH This Week

Denial-of-service in the Packet Forwarding Engine of Juniper Junos OS on MX Series routers allows an unauthenticated, network-adjacent attacker to crash and restart the FPC by continuously flapping Micro-BFD sessions. The PFEMAN process queues each up/down event and, in a Virtual-Chassis deployment with locality-bias enabled, processing is slow enough that a sustained flap backlog prevents completion and trips the PFEMAN watchdog timer, forcing an FPC restart and a full traffic outage. No public exploit identified at time of analysis and the issue is not in CISA KEV, but the low complexity and unauthenticated adjacent vector make it a credible availability threat to affected line cards (MPC9 and below).

Juniper Denial Of Service Junos
NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy