PULSEUnderground Intel

EN VIVO19señales / 24h

FEED

ransomakira reclama a Bravilor Bonamat · NL · Manufacturingransomakira reclama a SCHWAB-SYSTEM · DE · Financial Servicesransomorova reclama a Wah Chan Consolidated Sdn Bhd · MY · Otherransomorova reclama a Trevi Technology · TW · Technologyransomdoommageddon reclama a R*********b R**-L** · Not Foundransomsarcoma reclama a Don Pickett & Associates · Professional Servicesransomscarlettgroup reclama a vinsolutions.com · US · Professional Servicesransomauditteam reclama a Ca***ka · ES · Not Foundransomrhysida reclama a Line2Line Coatings · Manufacturingransomfulcrumsec reclama a EMARKETER · US · Technologyransomn0n reclama a Horn of Africa Regional Environment Centre and Network · ET · Otherransomwallstreet reclama a Prism Medical Products · US · Healthcareransomn0n reclama a PROTEX Confection · TN · Manufacturingransomn0n reclama a SunTechnics Fabrisolar AG · CH · Energy & Utilitiesransomakira reclama a Bravilor Bonamat · NL · Manufacturingransomakira reclama a SCHWAB-SYSTEM · DE · Financial Servicesransomorova reclama a Wah Chan Consolidated Sdn Bhd · MY · Otherransomorova reclama a Trevi Technology · TW · Technologyransomdoommageddon reclama a R*********b R**-L** · Not Foundransomsarcoma reclama a Don Pickett & Associates · Professional Servicesransomscarlettgroup reclama a vinsolutions.com · US · Professional Servicesransomauditteam reclama a Ca***ka · ES · Not Foundransomrhysida reclama a Line2Line Coatings · Manufacturingransomfulcrumsec reclama a EMARKETER · US · Technologyransomn0n reclama a Horn of Africa Regional Environment Centre and Network · ET · Otherransomwallstreet reclama a Prism Medical Products · US · Healthcareransomn0n reclama a PROTEX Confection · TN · Manufacturingransomn0n reclama a SunTechnics Fabrisolar AG · CH · Energy & Utilities

← Todos los CVEs

CVE Watch8 oct 2026

CVE-2026-20173

A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of ser

CVSS

5.8

Medio

EPSS

0.4%

p30

KEV

—

Exploit Today

9

0-100

Publicado: 7 oct 2026 · Última mod.: 8 oct 2026 · CWE-770

EPSS · 30d

0.4%EPSS · 30 días0.4%

2026-10-082026-10-23

Descripción técnica

A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition. This vulnerability exists because rate limiting was improperly applied to some protocols. An attacker could exploit this vulnerability by sending a high rate of UDP or TCP connections to a data plane interface on an affected device. A successful exploit could allow the attacker to cause instability to various routing and control plane protocols through some packet loss and temporary disruptions, causing a DoS condition. This DoS condition will clear without manual intervention soon after the high rate of traffic is stopped.

Referencias oficiales

sec.cloudapps.cisco.comhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-nscpdos-SnderkC7

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-86019—

——5Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated API users to bypass the configured maximum attachment file size by uploading attachments through the API using base64-encoded file data. The application enforces the configured attachment size limit for normal browser-based file uploads, but the API base64 upload path does not apply the same size validation. As a result, an authenticated user with API access and permission to create attachments can upload files larger than the configured maximum attachment size, potentially exhausting disk space and causing a denial of service. This issue has been patched in version 2.13.2.14h CVE-2026-86018—

——6Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated users to bypass the configured maximum attachment file size when using the server-side “Download external file” attachment feature. When server-side attachment downloads are enabled, Part-DB downloads the remote file and streams it directly to disk without enforcing the configured MAX_ATTACHMENT_FILE_SIZE limit. As a result, an authenticated user who can create or edit attachments can cause Part-DB to store files larger than the configured maximum attachment size, potentially exhausting disk space and causing a denial of service. This issue has been patched in version 2.13.2.14h CVE-2026-1153985.5 MED

——1Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive entries. Attackers can persuade a user to open or batch-import a crafted TAR or ZIP archive with excessive entries to exhaust the Java heap and hang the session.2h CVE-2026-1153975.5 MED

——1Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder() that extracts every extension ZIP entry without limiting file count. Attackers who persuade a user to install a crafted extension archive with many files can exhaust filesystem inodes, causing project writes and other processes to fail.2h CVE-2026-1153955.5 MED

——1Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that extracts unlimited theme ZIP entries to the images directory. Attackers can persuade users to import a crafted theme archive with many small files, exhausting inodes and disk space to deny service to the host.2h CVE-2026-1153915.8 MED

——2Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 contains an uncontrolled resource allocation vulnerability in its WASIp3 implementation that buffers guest-specified-length writes on the host without limit. Malicious guests can offer large buffers to WASIp3 file or HTTP write streams, causing the host to copy and buffer all bytes, bounded only by guest linear memory, exhausting host memory.1d