CWE-400

3,094 vulnerabilities with CWE-400

CVE-2026-34650 HIGH

Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)

CVSS 7.5

CVE-2026-34649 HIGH

Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)

CVSS 7.5

CVE-2026-34648 HIGH

Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)

CVSS 7.5

CVE-2026-23824 HIGH

Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component

CVSS 7.5

CVE-2026-44167 HIGH

phpseclib: CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID()

CVSS 7.5

CVE-2026-42006 MEDIUM

OX Dovecot Pro < 3.0.5, < 3.1.4, < 2.4.3 - Unauthenticated Uncontrolled Resource Consumption via IMAP Bracing

CVSS 4.3

CVE-2026-40016 MEDIUM

OX Dovecot Pro < 2.3.0 - Uncontrolled Resource Consumption via Sieve Script CPU Limit Bypass

CVSS 5.3

CVE-2026-43653 MEDIUM

iOS and iPadOS < 18.7.9 - Denial of Service via Uncontrolled Resource Consumption

CVSS 6.2

CVE-2026-28967 MEDIUM

iOS and iPadOS < 18.7.7 and < 26.4 - Denial of Service

CVSS 4.9

CVE-2026-28908 HIGH

macOS < 14.8.7, < 15.7.7, < 26.5 - Denial of Service via File System Modification

CVSS 7.5

CVE-2026-28872 HIGH

iOS and iPadOS < 18.7.9 and < 26.4 - Denial of Service via Resource Exhaustion

CVSS 7.5

CVE-2026-8319 MEDIUM

aiwaves-cn agents cheshire_cat_core stray_cat.py recall_relevant_memories_to_working_memory resource consumption

CVSS 5.3

CVE-2026-7790 HIGH

Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS

CVSS 7.5

CVE-2026-31247 HIGH

Docling JATS XML Backend thru 2.61.0 - XML Entity Expansion Denial of Service

CVSS 7.5

CVE-2026-8187 MEDIUM

Open5GS UPF gtp-path.c _gtpv1_u_recv_cb resource consumption

CVSS 5.3

CVE-2026-42343 MEDIUM

FastGPT: Uncontrolled Resource Consumption leading to Sandbox Exhaustion

CVE-2026-42212 HIGH

SolidCAM-GPPL-IDE: XML External Entity (XXE) and billion-laughs DoS in VMID parser

CVE-2026-38361 HIGH

dash-uploader 0.1.0-0.7.0a2 Upload Handler - Remote Code Execution

CVSS 7.5

CVE-2026-8124 LOW

GPAC box_code_base.c sidx_box_read allocation of resources

CVSS 3.3

CVE-2026-32686 MEDIUM

Unbounded exponent in decimal enables unauthenticated DoS

CVE-2026-41310 MEDIUM

OpenTelemetry .NET Zipkin exporter has unbounded remote endpoint cache leading to memory growth

CVSS 5.3

CVE-2026-34473 HIGH

ZTE Multiple Models - Unauthenticated DoS via Oversized POST Body

CVSS 7.5

CVE-2026-20188 NONE

Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Connection Exhaustion Denial of Service Vulnerability

CVE-2026-32936 HIGH

CoreDNS DoH GET path missing size validation causes CPU and memory amplification

CVSS 7.5

CVE-2026-43870 HIGH

Apache Thrift: Node.js web_server.js multi-vulnerability

CVSS 7.3