https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:32:09 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-10650 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2026-10650 https://cve.radiocsirt.org/vuln/euvd-2026-324328 EUVD-2026-324328 https://cve.radiocsirt.org/vuln/euvd-2026-324328 https://cve.radiocsirt.org/vuln/fkie_cve-2026-10650 <p>A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function lws_ssh_parse_plaintext of the file plugins/protocol_lws_ssh_base/sshd.c of the component SSH Protocol Handler. Executing a manipulation of the argument msg_len can lead to resource consumption. The attack may be launched remotely. The exploit has been published and may be used. This patch is called 3f9f0c6ecaf0e6f3f219d30632c5d1f2479d7498. A patch should be applied to remediate this issue.</p> <p>A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function lws_ssh_parse_plaintext of the file plugins/protocol_lws_ssh_base/sshd.c of the component SSH Protocol Handler. Executing a manipulation of the argument msg_len can lead to resource consumption. The attack may be launched remotely. The exploit has been published and may be used. This patch is called 3f9f0c6ecaf0e6f3f219d30632c5d1f2479d7498. A patch should be applied to remediate this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-10650 https://cve.radiocsirt.org/vuln/ghsa-23jv-8gf4-7r88 <p>A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function lws_ssh_parse_plaintext of the file plugins/protocol_lws_ssh_base/sshd.c of the component SSH Protocol Handler. Executing a manipulation of the argument msg_len can lead to resource consumption. The attack may be launched remotely. The exploit has been published and may be used. This patch is called 3f9f0c6ecaf0e6f3f219d30632c5d1f2479d7498. A patch should be applied to remediate this issue.</p> <p>A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function lws_ssh_parse_plaintext of the file plugins/protocol_lws_ssh_base/sshd.c of the component SSH Protocol Handler. Executing a manipulation of the argument msg_len can lead to resource consumption. The attack may be launched remotely. The exploit has been published and may be used. This patch is called 3f9f0c6ecaf0e6f3f219d30632c5d1f2479d7498. A patch should be applied to remediate this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-23jv-8gf4-7r88 https://cve.radiocsirt.org/vuln/oesa-2026-2668 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: libwebsockets, openEuler:22.03-LTS-SP4: libwebsockets, openEuler:24.03-LTS-SP1: libwebsockets, openEuler:24.03-LTS-SP3: libwebsockets</p> <p>Libwebsockets (LWS) is a flexible, lightweight pure C library for implementing modern network protocols easily with a tiny footprint, using a nonblocking event loop. Security Fix(es):</p> <p>A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function lws_ssh_parse_plaintext of the file plugins/protocol_lws_ssh_base/sshd.c of the component SSH Protocol Handler. Executing a manipulation of the argument msg_len can lead to resource consumption. The attack may be launched remotely. The exploit has been published and may be used. This patch is called 3f9f0c6ecaf0e6f3f219d30632c5d1f2479d7498. A patch should be applied to remediate this issue.(CVE-2026-10650)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: libwebsockets, openEuler:22.03-LTS-SP4: libwebsockets, openEuler:24.03-LTS-SP1: libwebsockets, openEuler:24.03-LTS-SP3: libwebsockets</p> <p>Libwebsockets (LWS) is a flexible, lightweight pure C library for implementing modern network protocols easily with a tiny footprint, using a nonblocking event loop. Security Fix(es):</p> <p>A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function lws_ssh_parse_plaintext of the file plugins/protocol_lws_ssh_base/sshd.c of the component SSH Protocol Handler. Executing a manipulation of the argument msg_len can lead to resource consumption. The attack may be launched remotely. The exploit has been published and may be used. This patch is called 3f9f0c6ecaf0e6f3f219d30632c5d1f2479d7498. A patch should be applied to remediate this issue.(CVE-2026-10650)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2668 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-10650 <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: libwebsockets, Ubuntu:Pro:22.04:LTS: libwebsockets, Ubuntu:Pro:24.04:LTS: libwebsockets, Ubuntu:25.10: libwebsockets, Ubuntu:26.04:LTS: libwebsockets</p> <p>A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function lws_ssh_parse_plaintext of the file plugins/protocol_lws_ssh_base/sshd.c of the component SSH Protocol Handler. Executing a manipulation of the argument msg_len can lead to resource consumption. The attack may be launched remotely. The exploit has been published and may be used. This patch is called 3f9f0c6ecaf0e6f3f219d30632c5d1f2479d7498. A patch should be applied to remediate this issue.</p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: libwebsockets, Ubuntu:Pro:22.04:LTS: libwebsockets, Ubuntu:Pro:24.04:LTS: libwebsockets, Ubuntu:25.10: libwebsockets, Ubuntu:26.04:LTS: libwebsockets</p> <p>A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function lws_ssh_parse_plaintext of the file plugins/protocol_lws_ssh_base/sshd.c of the component SSH Protocol Handler. Executing a manipulation of the argument msg_len can lead to resource consumption. The attack may be launched remotely. The exploit has been published and may be used. This patch is called 3f9f0c6ecaf0e6f3f219d30632c5d1f2479d7498. A patch should be applied to remediate this issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-10650