CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Aedes MQTT Broker Denial of Service (DoS) via Excessive Topic Depth (CVE-2026-63341)
[Affected Scope] All Node.js environments running Aedes MQTT broker versions prior to 1.1.1.
[Impact] An attacker can trigger an uncaught exception by sending messages with excessively deep topic structures, leading to a complete broker crash.
[Mitigation] Immediately update the Aedes package to version 1.1.1 or higher.
Cisco ASA and FTD SSL VPN Remote Denial of Service Vulnerability (CVE-2026-76418)
[Affected Scope] Cisco ASA and FTD Software with Remote Access SSL VPN enabled and secondary authentication configured.
[Impact] Unauthenticated remote attackers can trigger an unexpected device reload, leading to a complete Denial of Service (DoS) of VPN services.
[Mitigation] Apply the latest security patches from Cisco immediately; review secondary authentication configurations if patching is delayed.
Security Advisory for NetScaler ADC and Gateway Denial of Service (DoS) Vulnerability (CVE-2026-88779)
[Affected Scope] NetScaler ADC and Gateway versions prior to 14.1-73.41 and 13.1-64.28.
[Impact] Unauthenticated remote attackers can cause a Denial of Service (DoS) and system crash by sending specially crafted packets.
[Mitigation] Immediately apply the latest security patches provided by Citrix.
MikroTik RouterOS Authentication Bypass, Kernel Panic, and Info Leak (CVE-2026-67277) Security Advisory
[Affected Scope] MikroTik RouterOS versions 6.x and 7.x prior to specific patched releases.
[Impact] Unauthenticated attackers can exploit the bandwidth test (btest) feature to leak kernel memory or cause a Denial of Service (DoS) via kernel restart.
[Mitigation] Apply security patches (6.49.21, 7.23.4, 7.24.2 or later) and disable the bandwidth test server.