Topic
5 articles
CyberSecureToday covers CWE-400 across 5 articles published between 24 Sep 2026 and 14 Oct 2026.
The coverage includes 5 vulnerability advisories. 5 advisories are rated critical or high severity.
Stories on CWE-400 most often intersect with SCADA, Denial of Service and CISA Advisory, with Industrial, OT & IoT the most affected sector. The most recent story, “IBM WebSphere Liberty HTTP/2 HPACK Memory Exhaustion Flaw CVE-2026-93909 Remediated”, was published 14 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
Threat IntelIBM resolves a denial of service vulnerability in WebSphere Application Server Liberty (CVE-2026-93909) where malformed HTTP/2 HPACK frames exhaust JVM heap memory.
OT / SCADACISA industrial advisory ICSA-26-288-03 details high-severity flaw CVE-2026-49821 in Rockwell Automation ControlLogix 5580 controllers causing unrecoverable CPU hangs.
Threat IntelA critical flaw in vLLM distributed inference engine (CVE-2026-43109) allows unauthenticated network actors to poison PagedAttention KV caches and hijack model outputs.
OT / SCADACISA Advisory ICSA-26-279-01 details a critical denial of service flaw in Siemens SIMATIC S7-1500 and ET 200SP programmable logic controllers.
OT / SCADACISA issues advisory ICSA-26-265-08 for Siemens WTV676 and WTV776 M-Bus gateways, warning of a web interface flaw that terminates building SCADA telemetry.