Vendor
high
advisory
Twisted: Unauthenticated remote memory exhaustion in domish XML stream (CVE-2026-115775)
1 TTP 1 CVEThe Twisted XML element stream library is vulnerable to memory exhaustion, allowing unauthenticated remote attackers to trigger a denial of service by sending unbounded, unclosed XML element trees.
Twisted
denial-of-service
memory-exhaustion
xml-parsing
1t
1c
medium
advisory
Twisted DNS Server Denial of Service via Crafted Compression Pointers
2 rules 1 TTPA denial-of-service vulnerability exists in the twisted.names module, where an unauthenticated attacker can send a crafted TCP DNS packet with deeply chained compression pointers, causing the Twisted reactor to hang while processing recursive lookups and effectively freezing the server.
Twisted
denial-of-service
dns
2r
1t