ThreatVectr
Tag

#Denial of Service

17 stories taggedDenial of Service.

Photoreal news-editorial style, 16:9 framing, full-frame edge-to-edge composition
Vulnerabilities

Cisco firewalls are being crashed through a VPN flaw, and the fix is a full software upgrade

A high-severity bug in Cisco's Secure Firewall ASA and FTD software lets attackers reboot devices remotely with a single crafted web request. Cisco says the attacks started in August.

4 min read
Full-frame photoreal editorial image of a dimly lit corporate server room with rows of blue-lit racks, a soft red warning glow pulsing from one rack indicating
Vulnerabilities

Cisco Warns Windows Users of High-Severity ClamAV Flaws, Two With Working Attack Code Released

Seven vulnerabilities in the ClamAV antivirus engine affect Cisco's Secure Endpoint Connector software across Windows, macOS, and Linux. Patches land in August.

3 min read
A dimly lit server room with rows of dark racks, one panel glowing red with warning indicator lights, thin blue fibre-optic cables running along the ceiling, sh
Vulnerabilities

Researchers Find 84 Flaws in the Guts of 4G and 5G Networks

A Singapore university team says weaknesses in mobile core software could let attackers knock users offline or hijack their sessions.

3 min read
Aerial view of a large industrial fuel storage facility at dusk, rows of cylindrical metal tanks reflecting low amber light, pressure gauges and pipe networks v
Vulnerabilities

NASA's Core Flight System has a flaw that can crash spacecraft software

A researcher found that NASA's open-source flight software can be knocked offline by a single malformed command, and the patch for an earlier version of the same bug did not fully close the hole.

4 min read
Photoreal news-editorial image of a darkened enterprise server rack with one rack unit displaying a red status LED, others showing amber and green, shallow dept
Vulnerabilities

Mitsubishi Electric Factory Gear Vulnerable to Network Tampering Attack

A flaw in the CC-Link IE TSN protocol lets a nearby attacker knock dozens of industrial products offline. Mitsubishi has not shipped a fix.

3 min read
Full-frame photoreal editorial image of a dimly lit server rack in a data centre, one status light glowing red among rows of green, cool blue ambient lighting,
Vulnerabilities

Critical NGINX Flaw Lets Attackers Crash Web Servers From Afar

F5 has patched CVE-2026-42533, a memory bug in nginx that a remote attacker can trigger with a single crafted request.

3 min read
Photoreal editorial shot of a server rack in a dim data centre, one blade glowing faintly red, cables neatly arranged, shallow depth of field, edge-to-edge comp
Vulnerabilities

An 11-byte message can knock OpenSSL servers offline, researchers warn

A newly disclosed flaw nicknamed HollowByte lets attackers exhaust memory on servers running vulnerable versions of OpenSSL, the software that secures most of the web.

4 min read
Photoreal editorial photograph of a modern industrial factory floor at eye level, filling the entire frame edge to edge, focusing on a row of grey industrial co
Vulnerabilities

A malformed packet can knock Rockwell's Flex 5000 Adapter offline until someone power-cycles it

Rockwell Automation has patched a denial-of-service flaw in a widely deployed factory-floor module. The fix ships as firmware 6.012.

3 min read
Photoreal news-editorial 16:9 image of a dense tangle of fiber optic cables glowing under pressure in a dark server room, light fragmenting through the cables a
Vulnerabilities

Four Security Firms Patch Serious Flaws in Their Own Products

Tenable, ESET, Tanium, and Trend Micro have all pushed out fixes this month for high- and critical-severity vulnerabilities in tools that businesses rely on to stay secure.

3 min read
Photoreal news-editorial image of a dim server room with a single rack illuminated in red emergency lighting, cables neatly running along the floor, subtle haze
Vulnerabilities

Unpatched Flaw in Alibaba's XQUIC Lets Anyone Crash HTTP/3 Servers With 260 Bytes

A researcher at FoxIO disclosed the bug on 8 July. There is no fix, no login required, and no malformed packets involved.

3 min read
Photoreal news-editorial style, 16:9 framing, edge-to-edge composition
Vulnerabilities

CISA Orders Federal Agencies to Patch Palo Alto Firewall Flaw Being Exploited Now

A misconfigured URL filtering setting in Palo Alto Networks firewall software is letting attackers weaponise the firewalls themselves — turning them into unwitting cannons pointed at other targets.

3 min read
Vulnerabilities

Citrix Patches Six NetScaler Flaws, Including HTTP/2 Bomb DoS and a CitrixBleed Echo

Citrix is pushing customers to patch NetScaler after disclosing six vulnerabilities — among them a denial-of-service vector exploiting HTTP/2 frame handling and a high-severity information disclosure bug drawing uncomfortable comparisons to last year's CitrixBleed.

2 min read
AI Security

Poisoned Documents Can Freeze AI Agent Guardrails Dead in Their Tracks

Researchers found that a single malicious input can trap reasoning-based safety systems in extended thinking loops, slowing LangGraph deployments by 148x and starving co-located agents of resources.

2 min read
Vulnerabilities

CISA Flags SolarWinds Serv-U DoS Bug as Actively Exploited

CVE-2026-28318 crashes the file transfer service. Federal agencies get the usual three-week patch window.

2 min read
Vulnerabilities

HTTP/2 Bomb: A Decade-Old Compression Trick Finally Gets a CVE

A chained HPACK attack lets small packets force runaway memory allocation on nginx, Apache, IIS, Envoy, and Cloudflare's Pingora. Patches are partial. Exposure is wide.

2 min read
© 2026 Threat Vectr