Denial of service vulnerabilities

DoS2,105 advisories122 exploitedlatest 2026-08-26

Denial of service vulnerabilities let an attacker crash a service or exhaust its resources, taking it offline without necessarily gaining access. For internet-facing infrastructure — DNS, load balancers, VPN concentrators — a remotely triggerable DoS is an availability incident waiting to happen.

Classification is assigned by the CSIRTS enrichment pipeline from the advisory text. The list below shows the latest advisories tagged denial of service, newest first, across national CERTs, vendor PSIRTs and vulnerability databases — exploited marks CVEs in the CISA KEV catalog.

Latest denial of service advisories

USN-8659-4: Linux kernel (Oracle) vulnerability

unknownCVE-2026-64531ubuntu2026-08-26

USN-8666-2: Linux kernel (Azure) vulnerabilities

unknownCVE-2020-24588 CVE-2025-27558 CVE-2021-47378 CVE-2026-23392ubuntu2026-08-25

USN-8630-5: Linux kernel (Raspberry Pi) vulnerabilities

unknownCVE-2026-43083 CVE-2026-43197 CVE-2026-43198 CVE-2026-43465ubuntu2026-08-25

USN-8658-3: Linux kernel vulnerabilities

unknownCVE-2026-53224 CVE-2026-53246 CVE-2026-64531ubuntu2026-08-25

USN-8643-4: Linux kernel vulnerabilities

unknownCVE-2026-53224 CVE-2026-53246 CVE-2026-53247 CVE-2026-64531ubuntu2026-08-25

USN-8659-3: Linux kernel (Azure) vulnerability

unknownCVE-2026-64531ubuntu2026-08-25

USN-8680-1: FFmpeg vulnerabilities

unknownCVE-2026-70628 CVE-2026-70632ubuntu2026-08-25

USN-8678-1: OpenSSL vulnerabilities

unknownCVE-2026-14456 CVE-2026-14457 CVE-2026-18798 CVE-2026-54874ubuntu2026-08-25

[NEW] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2026-68455 CVE-2026-68456 CVE-2026-68457 CVE-2026-68458cert-bund2026-08-25

PayRange API

criticalCVE-2026-18965cisa2026-08-25

[NEW] [medium] Django: Multiple Vulnerabilities

mediumCVE-2026-54623 CVE-2026-54625cert-bund2026-08-25

[NEW] [high] Red Hat Enterprise Linux (Apicurio Registry): Multiple Vulnerabilities

highCVE-2026-12975 CVE-2026-12992 CVE-2026-12993 CVE-2026-41240cert-bund2026-08-25

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2026-52914 CVE-2026-52915 CVE-2026-52916 CVE-2026-52917cert-bund2026-08-25

[NEW] [high] PostgreSQL: Multiple vulnerabilities

highCVE-2026-14662 CVE-2026-14663 CVE-2026-14664 CVE-2026-14666cert-bund2026-08-25

[NEW] [high] ZScaler Client Connector: Multiple Vulnerabilities

highCVE-2026-59564 CVE-2026-59565 CVE-2026-59566 CVE-2026-59567cert-bund2026-08-25

[NEW] [high] Red Hat Enterprise Linux (mrtg, kbd, urwid): Multiple vulnerabilities

highCVE-2026-72694 CVE-2026-72693 CVE-2026-9323cert-bund2026-08-25

[NEW] [medium] Red Hat Enterprise Linux (pyasn1): Vulnerability enables Denial of Service

mediumCVE-2026-59886cert-bund2026-08-25

[NEW] [medium] GStreamer: Multiple vulnerabilities

mediumCVE-2026-59691 CVE-2026-59692cert-bund2026-08-25

[UPDATE] [high] Golang Go: Multiple vulnerabilities

highCVE-2026-27145 CVE-2026-42504 CVE-2026-42507cert-bund2026-08-25

[NEW] [critical] vm2: Multiple Vulnerabilities

criticalcert-bund2026-08-25

[UPDATE] [high] NGINX Open Source and NGINX Plus: Multiple vulnerabilities

highCVE-2026-42945 CVE-2026-40460 CVE-2026-40701 CVE-2026-42926cert-bund2026-08-25

[UPDATE] [high] NGINX Open Source and NGINX Plus: Vulnerability allows denial of service and potentially code execution

highCVE-2026-9256cert-bund2026-08-25

[UPDATE] [high] NGINX and NGINX Plus: Multiple vulnerabilities

highCVE-2026-11311 CVE-2026-32682 CVE-2026-42055 CVE-2026-42530cert-bund2026-08-25

[UPDATE] [high] NGINX and NGINX Plus: Multiple vulnerabilities

highCVE-2026-27654 CVE-2026-27651 CVE-2026-27784 CVE-2026-32647cert-bund2026-08-25

[NEW] [high] NGINX NGINX Plus: Multiple vulnerabilities

highCVE-2026-42533 CVE-2026-56434 CVE-2026-60005 CVE-2026-60065cert-bund2026-08-25

[NEW] [high] Mozilla Firefox, Firefox ESR and Thunderbird: Multiple Vulnerabilities

highCVE-2026-74934 CVE-2026-74935 CVE-2026-74936 CVE-2026-74937cert-bund2026-08-25

[NEW] [medium] Autodesk 3ds Max: Multiple Vulnerabilities

mediumCVE-2026-16781 CVE-2026-16782 CVE-2026-16783 CVE-2026-19568cert-bund2026-08-25

[UPDATE] [medium] cURL: Multiple vulnerabilities

mediumCVE-2026-10536 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586cert-bund2026-08-25

[NEW] [medium] GIMP: Multiple Vulnerabilities

mediumCVE-2026-78465 CVE-2026-78475cert-bund2026-08-25

[NEW] [UNPATCHED] [high] WebKitGTK: Vulnerability allows Code Execution

highCVE-2026-78376cert-bund2026-08-25

[UPDATE] [high] IBM WebSphere Application Server and Application Server Liberty: Multiple vulnerabilities

highCVE-2026-11383 CVE-2026-11536 CVE-2026-11541 CVE-2026-11594cert-bund2026-08-25

[UPDATE] [high] Apache HTTP Server: Multiple vulnerabilities

highCVE-2026-49975 CVE-2026-29167 CVE-2026-29170 CVE-2026-34355cert-bund2026-08-25

[NEW] [medium] IBM WebSphere Application Server: Multiple vulnerabilities enable Denial of Service

mediumCVE-2026-50645 CVE-2026-9171 CVE-2026-9322cert-bund2026-08-25

[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilities

mediumCVE-2026-43059 CVE-2026-43060 CVE-2026-43061 CVE-2026-43062cert-bund2026-08-25

[UPDATE] [high] Linux Kernel: Multiple Vulnerabilities

highCVE-2026-31693 CVE-2026-31694 CVE-2026-31695 CVE-2026-31696cert-bund2026-08-25

[UPDATE] [medium] libssh2: Vulnerability allows Denial of Service

mediumCVE-2026-7598cert-bund2026-08-25

[UPDATE] [high] Fast Datapath for Red Hat Enterprise Linux (ovn): Multiple Vulnerabilities

highCVE-2026-5265 CVE-2026-5367cert-bund2026-08-25

[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities

mediumCVE-2026-31686 CVE-2026-31687 CVE-2026-31688 CVE-2026-31689cert-bund2026-08-25

[UPDATE] [high] Linux Kernel: Multiple Vulnerabilities

highCVE-2026-31535 CVE-2026-31536 CVE-2026-31537 CVE-2026-31538cert-bund2026-08-25

[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilities

mediumCVE-2026-31434 CVE-2026-31435 CVE-2026-31436 CVE-2026-31437cert-bund2026-08-25

[UPDATE] [medium] Red Hat Hardened Images RPMs: Multiple vulnerabilities

mediumCVE-2025-69277 CVE-2026-2100 CVE-2026-41989 CVE-2026-4878cert-bund2026-08-25

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highexploitedCVE-2026-31431 CVE-2026-31432 CVE-2026-31433 CVE-2026-43284cert-bund2026-08-25

[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilities

mediumCVE-2026-31429 CVE-2026-31430cert-bund2026-08-25

[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilities

mediumCVE-2026-23412 CVE-2026-23413 CVE-2026-23414 CVE-2026-23415cert-bund2026-08-25

[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilities

mediumCVE-2026-23271 CVE-2026-23272 CVE-2026-23273 CVE-2026-23274cert-bund2026-08-25

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-71192 CVE-2025-71193 CVE-2025-71194 CVE-2025-71195cert-bund2026-08-25

[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow Denial of Service

mediumCVE-2026-23239 CVE-2026-23240cert-bund2026-08-25

[UPDATE] [high] Linux Kernel: Multiple Vulnerabilities

highCVE-2025-68767 CVE-2025-68768 CVE-2025-68769 CVE-2025-68770cert-bund2026-08-25

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2022-50712 CVE-2022-50713 CVE-2022-50714 CVE-2022-50715cert-bund2026-08-25

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-40346 CVE-2025-40347 CVE-2025-40348 CVE-2025-40349cert-bund2026-08-25

Other vulnerability classes

Remote code execution (2023)Privilege escalation (1548)Authentication bypass (1066)Information disclosure (1543)Memory corruption (1308)Path traversal (235)Code injection (343)Cross-site scripting (315)Unsafe deserialization (83)SQL injection (143)Server-side request forgery (109)

New denial of service advisories, in your inbox. The daily briefing covers every advisory in this class the morning after it lands. Subscribe free — one email every morning after 06:00 UTC, one-click unsubscribe. Tracking specific products instead? Watch them from any product page and get alerted only when they ship a new advisory.