CVE-2026-28751
in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.
CVSS
3.3
Low
EPSS
0.1%
p2
KEV
—
Exploit Today
1
0-100
Published: May 19, 2026 · Last modified: Jul 24, 2026 · CWE-20
0.1%EPSS · 30 days0.1%
2026-10-052026-11-02
in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-119641——
——0** UNSUPPORTED WHEN ASSIGNED ** Improper input validation vulnerability in Apache Oozie. An authenticated Oozie user can reconfigure another tenant's
workflow job and change its ownership.
This issue affects Apache Oozie: all versions.
As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.
NOTE: This vulnerability only affects products that are no longer supported by the maintainer.5hCVE-2026-116768——
——0CVE-2026-116768 is a missing length validation vulnerability
in Secure Access servers prior to 14.61. Authenticated attackers can cause a
persistent denial of service when connecting for the first time.17hCVE-2026-863654.2 MED—
——0Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Input Validation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of Service.19hCVE-2026-552628.4 HIG—
——0In setNotificationListenerAccessGrantedForUserInternal of NotificationManagerService.java, there is a possible policy desynchronization due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.10hCVE-2026-285978.4 HIG—
——0In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.10hCVE-2026-1068047.5 HIG—
——0A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn module. The w_rx_aar_register() function copies the attacker-controlled host field from the SIP `Via` header into a fixed 46-byte stack buffer without validating its length. An unauthenticated remote attacker can trigger the vulnerability with a crafted SIP `REGISTER` request, causing stack corruption and termination of the affected Kamailio instance, resulting in denial of service.20h