Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 19:47:09 +0000 EUVD-2026-336790 https://cve.radiocsirt.org/vuln/euvd-2026-336790 EUVD-2026-336790 https://cve.radiocsirt.org/vuln/euvd-2026-336790 fkie_cve-2026-41458 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41458 <p>OwnTone Server versions 28.4 through 29.0 contain a race condition vulnerability in the DAAP login handler that allows unauthenticated attackers to crash the server by exploiting unsynchronized access to the global DAAP session list. Attackers can flood the DAAP /login endpoint with concurrent requests to trigger a remote denial of service condition without requiring authentication.</p> <p>OwnTone Server versions 28.4 through 29.0 contain a race condition vulnerability in the DAAP login handler that allows unauthenticated attackers to crash the server by exploiting unsynchronized access to the global DAAP session list. Attackers can flood the DAAP /login endpoint with concurrent requests to trigger a remote denial of service condition without requiring authentication.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-41458 GHSA-rvqf-8mp6-8qjg https://cve.radiocsirt.org/vuln/ghsa-rvqf-8mp6-8qjg <p>OwnTone Server versions 28.4 through 29.0 contain a race condition vulnerability in the DAAP login handler that allows unauthenticated attackers to crash the server by exploiting unsynchronized access to the global DAAP session list. Attackers can flood the DAAP /login endpoint with concurrent requests to trigger a remote denial of service condition without requiring authentication.</p> <p>OwnTone Server versions 28.4 through 29.0 contain a race condition vulnerability in the DAAP login handler that allows unauthenticated attackers to crash the server by exploiting unsynchronized access to the global DAAP session list. Attackers can flood the DAAP /login endpoint with concurrent requests to trigger a remote denial of service condition without requiring authentication.</p> https://cve.radiocsirt.org/vuln/ghsa-rvqf-8mp6-8qjg