Loading story…
dCERT issued multiple advisories for Tinyproxy warning that a vulnerability can be exploited to cause a denial of service. The notices identify the affected software as Tinyproxy and describe the impact as service disruption, indicating that attackers could crash or otherwise render the lightweight proxy unavailable.
dCERT published advisory 2026-0894 followed by advisory 2026-0980, both covering the same denial-of-service condition in Tinyproxy. While the advisories provide limited public detail, the repeated notices indicate ongoing vendor or coordinator tracking of the issue and underscore the need for organizations using Tinyproxy to review available fixes and mitigations and assess exposure in internet-facing deployments.
See affected versions and whether adversaries are exploiting it.
2 events from the most recent confirmed update back to the earliest known activity.
dCERT later published advisory 2026-0980 covering a Tinyproxy vulnerability that could allow denial of service. Based on the available references, this is a separate advisory from the earlier March notice.
dCERT issued advisory 2026-0894 for a Tinyproxy vulnerability that could allow denial of service. No additional technical details or remediation information are provided in the reference.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
dCERT issued two advisories for **Linux Kernel** vulnerabilities that can lead to **denial of service**, identifying the issues as advisory `2026-1017` and advisory `2026-1046`. Both notices describe flaws in the kernel that could allow attackers to disrupt system availability, underscoring continued risk to Linux-based servers, appliances, and endpoints that rely on the affected kernel components. While the advisories do not include public synopses, the paired notices indicate separate Linux Kernel denial-of-service issues requiring review by defenders and system owners. Organizations running Linux should track the affected kernel versions referenced by dCERT, prioritize vendor patches or mitigations as they become available, and assess exposure across internet-facing and critical internal systems where service interruption would have operational impact.
Jun 29, 2026
German authorities published security advisories for **Apache Traffic Server** and **Apache Tomcat/Tomcat Native**, warning of multiple vulnerabilities affecting the widely used web proxy, caching, and Java application server products. The notices identify separate issues in the two Apache projects, indicating that organizations running these technologies should review vendor guidance and determine whether exposed internet-facing services or internal application platforms are affected. The advisories provide limited public detail, but the affected software is commonly deployed in enterprise web delivery and application environments, raising the risk of service disruption, unauthorized access, or further compromise if vulnerable instances remain unpatched. Security teams are expected to prioritize asset identification, apply available updates from the Apache projects and downstream vendors, and monitor systems using **Apache Traffic Server**, **Apache Tomcat**, and **Tomcat Native** for signs of exploitation or abnormal activity.
Jun 29, 2026
National cyber authorities in Belgium and Canada warned about **CVE-2026-2507**, a high-severity **denial-of-service (DoS)** vulnerability in F5 **BIG-IP Traffic Management Microkernel (TMM)** affecting *BIG-IP AFM* and *BIG-IP DDoS Hybrid Defender* when those modules are provisioned. The issue impacts versions **17.x through 17.5.1.4** and can be triggered remotely over the network by an **unauthenticated** attacker using **undisclosed traffic** that can cause **TMM to terminate**, resulting in service interruption and loss of availability (CVSS **7.5**). Both advisories direct organizations to F5’s vendor bulletin `K000160003` and recommend applying the relevant updates with high priority. The Centre for Cybersecurity Belgium additionally advises increasing monitoring/detection for suspicious activity and notes that patching prevents future exploitation but does not remediate any potential prior compromise, and provides incident reporting guidance via its national CERT channel.
Jun 29, 2026