Monthly
A crafted BGP route update sent by an adjacent eBGP peer can crash the routing protocol daemon (rpd) on Juniper Networks Junos OS and Junos OS Evolved devices that have RIB sharding enabled, producing a denial-of-service condition affecting routing availability. Per the independent assessment, exploitation requires two non-trivial preconditions: RIB sharding must be explicitly configured (it is not a default setting), and the attacker must already hold an established eBGP peering session with the target; the assessed vector (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) is unauthenticated but adjacent, with availability-only impact and no confidentiality or integrity effect. There is no public exploit identified at time of analysis and no CISA KEV listing, so this is a high-severity but condition-gated DoS rather than a code-execution or data-exposure flaw; devices without RIB sharding or peering only with trusted neighbors are not realistically exposed.
Authenticated low-privilege users with network access to the Splunk Enterprise management/web interface can abuse improper resource lifetime handling to achieve high confidentiality, integrity, and availability impact on deployments running versions below 9.4.15, 10.0.10, 10.2.7, or 10.4.3. The flaw is rated CVSS 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and is one of a group of internally discovered issues covered by Splunk advisory SVD-2026-1002, where CVEs are assigned per CWE group, so the specific vulnerable subsystem is not individually named. Real-world likelihood currently appears limited: EPSS is 0.15% (4th percentile), there is no CISA KEV listing and no public exploit identified at time of analysis, and the primary gating factor is that an attacker must already hold valid Splunk credentials or a session.
A bundled Cisco software-hardening release resolves multiple internally discovered resource-lifecycle flaws (CWE-664) affecting Cisco Meraki MX security appliances, MR wireless access points, MV camera firmware, and Cisco Campus Gateway Software. Per the assessed vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, 7.5), the impact is availability-only - an unauthenticated remote attacker who can reach the affected service can trigger resource mismanagement that crashes or degrades the device, with no confidentiality or integrity loss. No public exploit code or confirmed active exploitation has been identified at time of analysis, and Cisco has not published a specific patched firmware version in the CVE metadata, so administrators should consult the linked advisory to map the hardening release to their exact hardware and firmware train.
Unauthenticated remote attackers who can reach the management/API plane of the Cisco Application Policy Infrastructure Controller (APIC) could potentially achieve full compromise of confidentiality, integrity, and availability, as reflected by the CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The issue was discovered by Cisco's own engineering team during an internal security review of APIC and falls under CWE-664, the improper control of a resource through its lifetime; affected coverage in the supplied CPE is a wildcard for all APIC versions, so no specific vulnerable build range is enumerated. At time of analysis there is no public exploit identified and no CISA KEV confirmation, although APIC's role as a data-center SDN controller on typically isolated management networks is the principal practical barrier to exploitation rather than any input-confirmed technical prerequisite.
Unauthenticated attackers on an adjacent network segment can exploit multiple resource lifetime flaws (CWE-664) in Cisco Secure Firewall ASA, FTD, and FMC software to potentially achieve full confidentiality, integrity, and availability impact (CVSS 8.8). The vulnerabilities were internally discovered and addressed in a Cisco hardening release; the exact affected feature is not publicly detailed, and no public exploit code has been identified at time of analysis.
Unauthenticated remote attackers who can reach a Cisco Secure Email Gateway or Secure Email and Web Manager deployment can trigger improper resource-lifetime handling (CWE-664) that degrades availability and can leak limited information. Cisco's own advisory scores the issue 9.8 (C:H/I:H/A:H), while independent assessment scores it considerably lower at C:L/I:N/A:H; the two sources conflict sharply over whether integrity and full confidentiality are actually at risk, but both agree the availability impact is high and that no privileges or user interaction are required per the CVSS vector (AV:N/AC:L/PR:N/UI:N). No public exploit code has been identified at time of analysis, no exploitation has been observed (SSVC Exploitation: none), and EPSS is low at 0.37% (31st percentile), though the flaw is classified as automatable with total technical impact in CISA's SSVC framework.
Improper resource lifecycle control (CWE-664) in Cisco IOS XR Software is addressed by a batch software-hardening release stemming from Cisco's internal security review (advisory cisco-sa-hardening-iosxr-qg64NcM). The provided CVSS vector (AV:N/AC:L/PR:N/UI:N, 9.8) implies a remotely reachable, unauthenticated flaw with high confidentiality, integrity, and availability impact on IOS XR routers, but Cisco's omnibus advisory publishes no technical specifics on the affected component or trigger. No public exploit identified at time of analysis, and no EPSS/KEV data was supplied.
Native off-heap memory exhaustion in netty-incubator-codec-ohttp (versions before 0.0.23.Final) allows unauthenticated remote attackers to cause a gateway denial-of-service by repeatedly sending OHTTP requests with invalid ciphertext. Each request that fails AEAD tag verification causes the pre-allocated pooled direct ByteBuf to leak permanently, because the decryption path lacks a try/finally guard around the buffer release. Sustained malformed-request flooding will exhaust JVM native direct memory, crashing or severely degrading the OHTTP gateway process. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Unauthenticated remote attackers can cause high availability impact with scope change on Cisco IOS XE Software through improper control of resources across their lifetime (CWE-664), affecting an exceptionally broad version range from 16.6.x through 26.1.x. The vulnerabilities were discovered proactively by Cisco's internal security engineering team and grouped as a software hardening release, meaning patches were prepared before external threat actor awareness. No public exploit exists and the CVE is absent from CISA KEV, but the AV:N/AC:L/PR:N/UI:N CVSS profile means exploitation requires no authentication or special conditions against any network-accessible IOS XE device.
Remote denial of service in Cisco RoomOS software allows unauthenticated attackers to exhaust or corrupt a resource over the network, disrupting availability of Cisco collaboration room endpoints. Disclosed as part of a Cisco-internal security hardening review under the CWE-664 resource-lifetime pillar, the flaw carries a 7.5 CVSS score with an availability-only impact (C:N/I:N/A:H). No public exploit identified at time of analysis, and it is not listed in CISA KEV.
A crafted BGP route update sent by an adjacent eBGP peer can crash the routing protocol daemon (rpd) on Juniper Networks Junos OS and Junos OS Evolved devices that have RIB sharding enabled, producing a denial-of-service condition affecting routing availability. Per the independent assessment, exploitation requires two non-trivial preconditions: RIB sharding must be explicitly configured (it is not a default setting), and the attacker must already hold an established eBGP peering session with the target; the assessed vector (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) is unauthenticated but adjacent, with availability-only impact and no confidentiality or integrity effect. There is no public exploit identified at time of analysis and no CISA KEV listing, so this is a high-severity but condition-gated DoS rather than a code-execution or data-exposure flaw; devices without RIB sharding or peering only with trusted neighbors are not realistically exposed.
Authenticated low-privilege users with network access to the Splunk Enterprise management/web interface can abuse improper resource lifetime handling to achieve high confidentiality, integrity, and availability impact on deployments running versions below 9.4.15, 10.0.10, 10.2.7, or 10.4.3. The flaw is rated CVSS 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and is one of a group of internally discovered issues covered by Splunk advisory SVD-2026-1002, where CVEs are assigned per CWE group, so the specific vulnerable subsystem is not individually named. Real-world likelihood currently appears limited: EPSS is 0.15% (4th percentile), there is no CISA KEV listing and no public exploit identified at time of analysis, and the primary gating factor is that an attacker must already hold valid Splunk credentials or a session.
A bundled Cisco software-hardening release resolves multiple internally discovered resource-lifecycle flaws (CWE-664) affecting Cisco Meraki MX security appliances, MR wireless access points, MV camera firmware, and Cisco Campus Gateway Software. Per the assessed vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, 7.5), the impact is availability-only - an unauthenticated remote attacker who can reach the affected service can trigger resource mismanagement that crashes or degrades the device, with no confidentiality or integrity loss. No public exploit code or confirmed active exploitation has been identified at time of analysis, and Cisco has not published a specific patched firmware version in the CVE metadata, so administrators should consult the linked advisory to map the hardening release to their exact hardware and firmware train.
Unauthenticated remote attackers who can reach the management/API plane of the Cisco Application Policy Infrastructure Controller (APIC) could potentially achieve full compromise of confidentiality, integrity, and availability, as reflected by the CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The issue was discovered by Cisco's own engineering team during an internal security review of APIC and falls under CWE-664, the improper control of a resource through its lifetime; affected coverage in the supplied CPE is a wildcard for all APIC versions, so no specific vulnerable build range is enumerated. At time of analysis there is no public exploit identified and no CISA KEV confirmation, although APIC's role as a data-center SDN controller on typically isolated management networks is the principal practical barrier to exploitation rather than any input-confirmed technical prerequisite.
Unauthenticated attackers on an adjacent network segment can exploit multiple resource lifetime flaws (CWE-664) in Cisco Secure Firewall ASA, FTD, and FMC software to potentially achieve full confidentiality, integrity, and availability impact (CVSS 8.8). The vulnerabilities were internally discovered and addressed in a Cisco hardening release; the exact affected feature is not publicly detailed, and no public exploit code has been identified at time of analysis.
Unauthenticated remote attackers who can reach a Cisco Secure Email Gateway or Secure Email and Web Manager deployment can trigger improper resource-lifetime handling (CWE-664) that degrades availability and can leak limited information. Cisco's own advisory scores the issue 9.8 (C:H/I:H/A:H), while independent assessment scores it considerably lower at C:L/I:N/A:H; the two sources conflict sharply over whether integrity and full confidentiality are actually at risk, but both agree the availability impact is high and that no privileges or user interaction are required per the CVSS vector (AV:N/AC:L/PR:N/UI:N). No public exploit code has been identified at time of analysis, no exploitation has been observed (SSVC Exploitation: none), and EPSS is low at 0.37% (31st percentile), though the flaw is classified as automatable with total technical impact in CISA's SSVC framework.
Improper resource lifecycle control (CWE-664) in Cisco IOS XR Software is addressed by a batch software-hardening release stemming from Cisco's internal security review (advisory cisco-sa-hardening-iosxr-qg64NcM). The provided CVSS vector (AV:N/AC:L/PR:N/UI:N, 9.8) implies a remotely reachable, unauthenticated flaw with high confidentiality, integrity, and availability impact on IOS XR routers, but Cisco's omnibus advisory publishes no technical specifics on the affected component or trigger. No public exploit identified at time of analysis, and no EPSS/KEV data was supplied.
Native off-heap memory exhaustion in netty-incubator-codec-ohttp (versions before 0.0.23.Final) allows unauthenticated remote attackers to cause a gateway denial-of-service by repeatedly sending OHTTP requests with invalid ciphertext. Each request that fails AEAD tag verification causes the pre-allocated pooled direct ByteBuf to leak permanently, because the decryption path lacks a try/finally guard around the buffer release. Sustained malformed-request flooding will exhaust JVM native direct memory, crashing or severely degrading the OHTTP gateway process. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Unauthenticated remote attackers can cause high availability impact with scope change on Cisco IOS XE Software through improper control of resources across their lifetime (CWE-664), affecting an exceptionally broad version range from 16.6.x through 26.1.x. The vulnerabilities were discovered proactively by Cisco's internal security engineering team and grouped as a software hardening release, meaning patches were prepared before external threat actor awareness. No public exploit exists and the CVE is absent from CISA KEV, but the AV:N/AC:L/PR:N/UI:N CVSS profile means exploitation requires no authentication or special conditions against any network-accessible IOS XE device.
Remote denial of service in Cisco RoomOS software allows unauthenticated attackers to exhaust or corrupt a resource over the network, disrupting availability of Cisco collaboration room endpoints. Disclosed as part of a Cisco-internal security hardening review under the CWE-664 resource-lifetime pillar, the flaw carries a 7.5 CVSS score with an availability-only impact (C:N/I:N/A:H). No public exploit identified at time of analysis, and it is not listed in CISA KEV.