Skip to content
Threat Feed
Subscribe

Tag

Network-Attack

6 briefs RSS
medium advisory

Broadcom Brocade SANnav Vulnerabilities Allow Information Disclosure, SQL Injection, and Data Manipulation

Multiple vulnerabilities in Broadcom Brocade SANnav can be exploited by an attacker from an adjacent network to achieve information disclosure, execute SQL injection attacks, and manipulate data within the system.

SANnav vulnerability sql-injection data-manipulation information-disclosure network-attack
3t
medium advisory

Netty XmlFrameDecoder CPU Exhaustion Denial of Service

An unauthenticated remote attacker can cause a Denial of Service (DoS) in Netty servers utilizing XmlFrameDecoder by sending a specially crafted XML payload containing repeated '</' characters, leading to CPU exhaustion of the server's EventLoop thread and unresponsiveness.

netty-codec-xml +1 denial-of-service cpu-exhaustion network-attack vulnerability
1t
medium advisory

OpenSSH sshd Denial-of-Service via GSSAPI Authentication (CVE-2026-60000)

A high-severity denial-of-service vulnerability, CVE-2026-60000, affects OpenSSH versions prior to 10.4, allowing remote attackers to exhaust server resources through excessive and mishandled GSSAPI authentication attempts, leading to service unavailability.

OpenSSH < 10.4 +1 denial-of-service ssh openssh network-attack
1c
high advisory

Coder Tailnet Vulnerability (CVE-2026-55428) Leads to Route Hijacking

A high-severity vulnerability (CVE-2026-55428) in Coder's tailnet coordinator allows a malicious workspace agent to hijack network routes by advertising arbitrary `AllowedIPs` prefixes, enabling interception and spoofing of web terminal and workspace application traffic.

Coder >= 2.34.0, < 2.34.2 +3 vulnerability cve route-hijacking network-attack supply-chain
1t
medium advisory

Potential DHCP Starvation via High Client MAC Cardinality

Attackers utilize DHCP starvation by flooding network segments with DHCP DISCOVER messages containing a high cardinality of distinct client MAC addresses to exhaust the DHCP lease pool, potentially leading to denial of service for legitimate clients and facilitating rogue DHCP server deployment.

network-attack denial-of-service network-security-monitoring impact
1t
high advisory

CVE-2026-56073: Cap-go OTP Verification Authentication Bypass

Cap-go versions prior to 12.128.2 are susceptible to an authentication bypass vulnerability (CVE-2026-56073) in OTP verification that allows attackers to manipulate server responses to falsely mark verification successful, leading to unauthorized 2FA enablement and subsequent account takeover.

Cap-go authentication-bypass web-application vulnerability account-takeover cve network-attack
2r 2t