Topic

Denial of Service: news, advisories and analysis

15 articlesUpdated 14 Oct 2026

CyberSecureToday covers Denial of Service across 15 articles published between 15 Sep 2026 and 14 Oct 2026. The coverage includes 14 vulnerability advisories and 1 analysis or guidance piece. 14 advisories are rated critical or high severity, and 3 involve flaws listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Denial of Service most often intersect with IEC 62443, SCADA and Industrial OT, with Technology, Cloud & SaaS the most affected sector. The most recent story, “IBM WebSphere Liberty HTTP/2 HPACK Memory Exhaustion Flaw CVE-2026-93909 Remediated”, was published 14 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSHigh
IBM WebSphere Liberty HTTP/2 HPACK Memory Exhaustion Flaw CVE-2026-93909 Remediated
IBM resolves a denial of service vulnerability in WebSphere Application Server Liberty (CVE-2026-93909) where malformed HTTP/2 HPACK frames exhaust JVM heap memory.
CST Editorial Desk14 Oct 20268 min read
ThreatsCloud & SaaSCritical
ISC BIND 9 TKEY Flaw Exploited to Crash Authoritative DNS Servers
ISC resolves a critical assertion failure defect in BIND 9 nameservers (CVE-2015-5477) where a single malformed TKEY query crashes DNS daemons remotely.
CST Editorial Desk13 Oct 20268 min read
ThreatsIndustrial & OTHigh
Schneider Electric Modicon M580 Ethernet Modules Vulnerable to Unauthenticated Malformed Packet Denial-of-Service (CVE-2026-55829)
Schneider Electric and CISA warn of a critical vulnerability in Modicon M580 communication modules allowing remote attackers to trigger unrecoverable PLC controller halts.
CST Editorial Desk9 Oct 20268 min read
ThreatsCloud & SaaSHigh
Citrix NetScaler SAML Overflow Forces Second Round of ADC and Gateway Upgrades
Citrix fixes CVE-2026-88779, a SAML memory overflow that crashes NetScaler ADC and Gateway. Last week's 14.1-73.37 and 13.1-64.23 builds are still vulnerable.
Daniel Okafor4 Oct 20265 min read
ThreatsIndustrial & OTHigh
Baicells Nova 430H Private LTE eNodeB Base Stations Exposed to Remote Radio Signaling Disruption (CVE-2026-96274)
CISA advisory ICSA-26-272-04 warns that malformed RF uplink packets in Baicells Nova 430H private LTE base stations cause remote denial-of-service.
CST Editorial Desk1 Oct 20268 min read
ThreatsCloud & SaaSHigh
vLLM EngineCore Guided Decoding State Failure Triggers Multi-Tenant GPU Cluster Denial of Service (GHSA-85xf-c7hm-whqw)
A high-severity flaw in vLLM EngineCore guided decoding allows crafted JSON Schema requests to trigger non-recoverable state crashes across multi-tenant GPU workers.
Mei-Lin Chen30 Sep 202610 min read
ThreatsIndustrial & OTHigh
Rockwell Automation RSLinx Classic CIP Flaws Enable Remote Denial of Service
CISA and Rockwell Automation disclose multiple CIP packet parsing flaws in RSLinx Classic (ICSA-26-244-01), enabling attackers to crash industrial SCADA communication gateways.
Mei-Lin Chen25 Sep 202617 min read
ThreatsIndustrial & OTHigh
Siemens Building Energy Gateway Flaw Enables Denial of Service in Smart Facilities
CISA issues advisory ICSA-26-265-08 for Siemens WTV676 and WTV776 M-Bus gateways, warning of a web interface flaw that terminates building SCADA telemetry.
CST Editorial Desk24 Sep 202615 min read
ThreatsCloud & SaaSHigh
Amazon Ion-C Library Recursion Flaw Triggers Cloud Service Stack Exhaustion Crashes CVE-2026-84851
AWS publishes Bulletin 2026-094-AWS for high-severity flaw CVE-2026-84851 in Amazon Ion-C library, allowing attackers to exhaust stack memory and crash services.
CST Editorial Desk24 Sep 202615 min read
ResearchCloud & SaaS
vLLM Multimodal Special Token Injection Triggers Remote Engine Crash and Service Denial CVE-2026-44222
High-severity flaw CVE-2026-44222 in vLLM allows remote unauthenticated users to crash distributed GPU inference clusters via crafted multimodal tokens.
CST Editorial Desk23 Sep 202615 min read
ThreatsCloud & SaaSHigh
AWS SDK for Go v2 Event Stream Flaw Triggers Remote Denial-of-Service Panic
AWS patches medium-severity flaw CVE-2026-89090 in AWS SDK for Go v2, where malformed event stream response frames trigger unrecovered runtime panics and service crashes.
CST Editorial Desk22 Sep 202614 min read
ThreatsCloud & SaaSHigh
OpenSearch Dashboards Route Handler Flaw Triggers Denial of Service Across Cloud Clusters
AWS and OpenSearch release security advisories for high-severity vulnerability CVE-2026-75897 in OpenSearch Dashboards enabling unauthenticated remote denial of service.
Priya Raman19 Sep 202610 min read
ThreatsIndustrial & OTCritical
Mitsubishi Electric CC-Link IE TSN Protocol Flaws Expose Factory Automation Cells
CISA issues ICS-CERT advisory ICSA-26-211-07 warning of critical protocol implementation flaws in Mitsubishi Electric CC-Link IE TSN industrial controllers.
Tom Verhoeven18 Sep 202610 min read
ThreatsIndustrial & OTHigh
KNX Building Automation Protocol Denial-of-Service Flaw Exploited Against Critical Infrastructure
CISA adds KNX industrial building automation protocol vulnerability CVE-2023-4346 to KEV catalog following active exploitation against critical OT facilities.
Tom Verhoeven18 Sep 202610 min read
ThreatsCloud & SaaSHigh
Citrix NetScaler Gateway Memory Buffer Overflow Exploited in Active Attacks
CISA issued a binding directive on CVE-2026-8452, a high-severity memory buffer vulnerability in Citrix NetScaler ADC and Gateway appliances triggering perimeter denial of service.
Priya Raman15 Sep 20267 min read