Monthly
Remotely triggerable denial-of-service conditions in Cisco NX-OS Software - including NX-OS System Software running in ACI mode and managed Cisco Unified Computing System deployments - can cause an affected device to reload or otherwise become unavailable. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H, base 8.6) describes an unauthenticated, low-complexity, network-reachable flaw with availability-only impact and scope change, meaning the affected process can degrade resources beyond its own security boundary, but there is no confidentiality or integrity impact and no public exploit code identified at time of analysis. The issue was found during Cisco's own internal security review and is delivered as a grouped software hardening release rather than a single named feature fix, so the precise triggering traffic or configuration is not disclosed; the practical risk is loss of availability of data-center switching and fabric devices that are reachable from an untrusted network segment.
Improper handling of exceptional conditions across Cisco Secure Firewall ASA Software, Threat Defense (FTD) Software, and Firewall Management Center (FMC) Software allows a remote, low-privilege authenticated attacker to achieve full confidentiality, integrity, and availability impact with a scope change, per the vendor's CVSS 9.9 rating. Exploitation requires an existing low-privilege session on a reachable ASA, FTD, or FMC instance (PR:L) but no user interaction and only low attack complexity; anonymous attackers cannot trigger it directly. The advisory is a grouped hardening release covering multiple internally discovered issues, so the exact triggering feature or configuration is not disclosed; no public exploit was identified at time of analysis, and no CISA KEV listing or EPSS score was provided.
Improper handling of expired trajectory data in the EGO-Planner-v2 replanning pipeline can command unsafe vehicle motion on an operating robot or UAV, producing loss of availability and potential physical harm. All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 are affected, and the defect only manifests when the planner is executing live on deployed hardware with the replanning loop active. It is assessed as a local, high-complexity control-loop robustness defect with no public exploit identified at time of analysis (EPSS 0.17%, no CISA KEV listing); published headline scoring for this CVE conflicts with those mechanics, so defenders should size remediation against the physical deployment rather than network exposure.
Denial of service in the Robotics-STAR-Lab (SYSU STAR Group) RACER autonomous exploration framework allows an unauthenticated remote attacker who can reach the exploration stack to disrupt its exploration state machine, halting or crashing mission execution on an affected robot. The flaw is an improper check or handling of exceptional conditions (CWE-703) that is remotely reachable with low complexity and no privileges or user interaction (CVSS 7.5, AV:N/AC:L/PR:N/UI:N, availability-only high impact). No public exploit code was identified in the supplied metadata and exploitation likelihood is very low (EPSS 0.17%, 6th percentile), consistent with RACER being a niche academic robotics project rather than widely deployed production software.
Improper escrow accounting in Gardens v2's StreamingEscrow contract allows a proposal beneficiary to receive the full available escrow balance when an approve-side dispute is resolved in their favour, rather than the correct depositAmount() entitlement. Affected commit is dfba919e218e20d52db9f7b2e8d292d45a46c91b and all prior revisions. No patch has been released at time of publication. No public exploit or CISA KEV listing has been identified, but the logic flaw is described in a public GitHub Security Advisory (GHSA-3xpr-2mm7-77j7), lowering the bar for exploitation by anyone familiar with the codebase.
Improper handling of exceptional conditions (CWE-703) in Cisco IOS XR Software allows an authenticated, remote attacker with low-privilege credentials to achieve high-impact compromise of confidentiality, integrity, and availability. The vulnerabilities were discovered internally by Cisco's security engineering team during a proactive review and are addressed in a software hardening release. No public exploit or active exploitation has been identified at time of analysis, but the CVSS 8.8 score and full C:H/I:H/A:H impact profile make this a significant risk for service-provider and enterprise core-network operators running affected IOS XR releases.
Stomper at commit 5e2741e crashes its server process when a broker attempts to write data to a TCP socket already closed by the client peer, delivering a SIGPIPE signal that the process does not handle, causing immediate termination. Any unauthenticated remote client can reliably trigger this by closing the socket at the right moment during a broker-to-client transmission, making the denial-of-service condition automatable. No patch version has been confirmed; a publicly available proof-of-concept bug report exists, though EPSS places exploitation probability at only 0.15%.
Denial of service in Cisco RoomOS software allows remote unauthenticated attackers to exhaust availability of affected collaboration endpoints and room-based video devices through improper handling of exceptional conditions (CWE-703). The issue was internally discovered by Cisco's RoomOS engineering team as part of a hardening release bundling multiple flaws under this identifier, carries a CVSS 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), and has no public exploit identified at time of analysis. Note that the CVSS vector reflects availability-only impact even though a source tag labels it 'Information Disclosure,' a discrepancy defenders should verify against the Cisco advisory.
Information disclosure in HP Deskjet 2800 Series printers running firmware TBP1CN2612AR or earlier lets an unauthenticated attacker on the network read sensitive configuration - including plaintext Wi‑Fi Direct credentials, device identity, and administrative security state - by sending plain GET requests to administrative API endpoints. The same data is gated behind administrator login in the web UI, so these API endpoints bypass the product's own access-control model. No public exploit identified at time of analysis and the CVE is not listed in CISA KEV.
Memory safety flaw in the CanvasWebGL graphics component of Mozilla Firefox allows remote attackers to trigger incorrect boundary handling through crafted web content, leading to limited confidentiality, integrity, and availability impact. The issue affects Firefox prior to version 152 and Firefox ESR prior to 140.12, and no public exploit identified at time of analysis. Reported by Mozilla with low complexity and no authentication required (CVSS 7.3).
Remotely triggerable denial-of-service conditions in Cisco NX-OS Software - including NX-OS System Software running in ACI mode and managed Cisco Unified Computing System deployments - can cause an affected device to reload or otherwise become unavailable. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H, base 8.6) describes an unauthenticated, low-complexity, network-reachable flaw with availability-only impact and scope change, meaning the affected process can degrade resources beyond its own security boundary, but there is no confidentiality or integrity impact and no public exploit code identified at time of analysis. The issue was found during Cisco's own internal security review and is delivered as a grouped software hardening release rather than a single named feature fix, so the precise triggering traffic or configuration is not disclosed; the practical risk is loss of availability of data-center switching and fabric devices that are reachable from an untrusted network segment.
Improper handling of exceptional conditions across Cisco Secure Firewall ASA Software, Threat Defense (FTD) Software, and Firewall Management Center (FMC) Software allows a remote, low-privilege authenticated attacker to achieve full confidentiality, integrity, and availability impact with a scope change, per the vendor's CVSS 9.9 rating. Exploitation requires an existing low-privilege session on a reachable ASA, FTD, or FMC instance (PR:L) but no user interaction and only low attack complexity; anonymous attackers cannot trigger it directly. The advisory is a grouped hardening release covering multiple internally discovered issues, so the exact triggering feature or configuration is not disclosed; no public exploit was identified at time of analysis, and no CISA KEV listing or EPSS score was provided.
Improper handling of expired trajectory data in the EGO-Planner-v2 replanning pipeline can command unsafe vehicle motion on an operating robot or UAV, producing loss of availability and potential physical harm. All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 are affected, and the defect only manifests when the planner is executing live on deployed hardware with the replanning loop active. It is assessed as a local, high-complexity control-loop robustness defect with no public exploit identified at time of analysis (EPSS 0.17%, no CISA KEV listing); published headline scoring for this CVE conflicts with those mechanics, so defenders should size remediation against the physical deployment rather than network exposure.
Denial of service in the Robotics-STAR-Lab (SYSU STAR Group) RACER autonomous exploration framework allows an unauthenticated remote attacker who can reach the exploration stack to disrupt its exploration state machine, halting or crashing mission execution on an affected robot. The flaw is an improper check or handling of exceptional conditions (CWE-703) that is remotely reachable with low complexity and no privileges or user interaction (CVSS 7.5, AV:N/AC:L/PR:N/UI:N, availability-only high impact). No public exploit code was identified in the supplied metadata and exploitation likelihood is very low (EPSS 0.17%, 6th percentile), consistent with RACER being a niche academic robotics project rather than widely deployed production software.
Improper escrow accounting in Gardens v2's StreamingEscrow contract allows a proposal beneficiary to receive the full available escrow balance when an approve-side dispute is resolved in their favour, rather than the correct depositAmount() entitlement. Affected commit is dfba919e218e20d52db9f7b2e8d292d45a46c91b and all prior revisions. No patch has been released at time of publication. No public exploit or CISA KEV listing has been identified, but the logic flaw is described in a public GitHub Security Advisory (GHSA-3xpr-2mm7-77j7), lowering the bar for exploitation by anyone familiar with the codebase.
Improper handling of exceptional conditions (CWE-703) in Cisco IOS XR Software allows an authenticated, remote attacker with low-privilege credentials to achieve high-impact compromise of confidentiality, integrity, and availability. The vulnerabilities were discovered internally by Cisco's security engineering team during a proactive review and are addressed in a software hardening release. No public exploit or active exploitation has been identified at time of analysis, but the CVSS 8.8 score and full C:H/I:H/A:H impact profile make this a significant risk for service-provider and enterprise core-network operators running affected IOS XR releases.
Stomper at commit 5e2741e crashes its server process when a broker attempts to write data to a TCP socket already closed by the client peer, delivering a SIGPIPE signal that the process does not handle, causing immediate termination. Any unauthenticated remote client can reliably trigger this by closing the socket at the right moment during a broker-to-client transmission, making the denial-of-service condition automatable. No patch version has been confirmed; a publicly available proof-of-concept bug report exists, though EPSS places exploitation probability at only 0.15%.
Denial of service in Cisco RoomOS software allows remote unauthenticated attackers to exhaust availability of affected collaboration endpoints and room-based video devices through improper handling of exceptional conditions (CWE-703). The issue was internally discovered by Cisco's RoomOS engineering team as part of a hardening release bundling multiple flaws under this identifier, carries a CVSS 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), and has no public exploit identified at time of analysis. Note that the CVSS vector reflects availability-only impact even though a source tag labels it 'Information Disclosure,' a discrepancy defenders should verify against the Cisco advisory.
Information disclosure in HP Deskjet 2800 Series printers running firmware TBP1CN2612AR or earlier lets an unauthenticated attacker on the network read sensitive configuration - including plaintext Wi‑Fi Direct credentials, device identity, and administrative security state - by sending plain GET requests to administrative API endpoints. The same data is gated behind administrator login in the web UI, so these API endpoints bypass the product's own access-control model. No public exploit identified at time of analysis and the CVE is not listed in CISA KEV.
Memory safety flaw in the CanvasWebGL graphics component of Mozilla Firefox allows remote attackers to trigger incorrect boundary handling through crafted web content, leading to limited confidentiality, integrity, and availability impact. The issue affects Firefox prior to version 152 and Firefox ESR prior to 140.12, and no public exploit identified at time of analysis. Reported by Mozilla with low complexity and no authentication required (CVSS 7.3).