#denial-of-service
10 articles
Between May and August 2026, ZCyberNews covered ten denial-of-service incidents affecting telecommunications, technology, enterprise networking, software development, and academic sectors globally. Coverage centered on five critical-severity vulnerabilities, each rated CVSS 9.2: CVE-2026-34176, CVE-2026-39459, CVE-2026-41225, CVE-2026-41957, and CVE-2026-42945. The reporting mix comprised six high-severity, two medium-severity, and two critical-severity cases. These stories tracked exploit attempts and mitigation efforts across the affected industries, with no single threat actor identified in the observed coverage. The archive provides a technical record of the period’s most significant availability attacks.
HIGHCisco Patches Actively Exploited ASA, FTD VPN DoS Flaw CVE-2026-20349
CVE-2026-20349 (CVSS 8.6) lets unauthenticated remote attackers crash Cisco ASA and FTD VPN devices via crafted HTTP requests. Active exploitation confirmed; hotfixes available.
MEDIUMOpen5GS NRF DoS CVE-2026-8731 Lets Remote Attackers Crash SBI Client
CVE-2026-8731 (CVSS 4.3) in Open5GS up to 2.7.7 lets remote attackers trigger a denial-of-service via the NRF component's SBI client_pool argument. Exploit code is public.
HIGHprotobufjs Flaw CVE-2026-45740 Enables DoS via Deeply Nested JSON
CVE-2026-45740 (CVSS 7.5) in protobufjs lets attackers crash Node.js apps by sending crafted JSON descriptors with deeply nested namespaces — affects versions before 7.5.8 and...
CRITICALF5 Patches 51 Flaws: NGINX DoS, BIG-IP RCE Among Critical Fixes
F5 fixed 19 high-severity and 32 medium-severity bugs across BIG-IP, BIG-IQ, and NGINX. The most severe, CVE-2026-42945 (CVSS 9.2), enables heap overflow DoS in NGINX rewrite...
HIGHCVE-2026-40612: jq Stack Overflow Lets Attackers Crash JSON Processor
CVE-2026-40612 in jq 1.8.1 and earlier allows attackers to trigger a stack overflow via deeply nested JSON input, crashing the tool. CVSS 7.5.
HIGHDocling JATS XML Backend XXE Flaw CVE-2026-31247 Enables DoS
CVE-2026-31247: Docling's JATS XML backend through 2.61.0 uses etree.parse() without disabling entity expansion, allowing XML bomb attacks that consume excessive resources and...
MEDIUMOpen5GS SMF DoS Flaws CVE-2026-8251, CVE-2026-8249 Exploited Publicly
Two CVSS 4.3 denial-of-service vulnerabilities in Open5GS up to 2.7.7 allow remote attackers to crash the SMF via crafted PCC rule updates. Public exploits exist.
HIGHMikroTik RouterOS SMB DoS Flaw CVE-2024-27686 Lets Remote Attackers
CVE-2024-27686 (CVSS 7.5) affects MikroTik RouterOS x86 versions 6.40.5 through 6.49.10 — a crafted SMB packet on TCP 445 triggers a device crash. No authentication required.
HIGHCisco DoS Flaw CVE-2026-20188 Requires Manual Reboot to Recover
CVE-2026-20188: Unauthenticated attackers can crash Cisco Crosswork Network Controller and NSO via low-complexity exploit. No patch for older releases; manual reboot required.
CRITICALApache Patches Critical HTTP/2 Double-Free Flaw CVE-2026-23918
Apache HTTP Server CVE-2026-23918 (CVSS 8.8) enables DoS and potential RCE via double-free in HTTP/2 handling. Affects all mod_http2 users. Patch now.
Stay Updated
Get the latest cybersecurity news delivered to your inbox.