Loading story…
A CNA record has been published for CVE-2026-65634, identifying a security issue associated with CWE-407: Inefficient Algorithmic Complexity. Publicly available reference material does not provide affected-product, version, attack-vector, severity, or remediation details.
CWE-407 covers algorithms whose resource consumption can grow disproportionately with attacker-controlled input, potentially enabling denial-of-service conditions through excessive CPU or memory use. Organizations should identify any vendor advisories tied to CVE-2026-65634, assess exposed deployments when product details become available, and apply vendor-provided updates or mitigations promptly.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A new CVE entry, **CVE-2026-27223**, was published in the MITRE CVE database, but the record currently provides **no public synopsis or technical details**. The available reference identifies the issue only by its CVE identifier, leaving the affected product, vulnerability class, impact, and remediation guidance undisclosed. A separate CVE record for **`CVE-2020-8749`** also appears in the provided references and likewise contains **no synopsis available**. With both entries lacking descriptive content, defenders have only the identifiers themselves and should monitor the official CVE records and vendor advisories for updates that clarify affected systems, severity, and patch availability.
Jul 12, 2026
Microsoft published guidance for **CVE-2026-26144**, a **Critical** *Microsoft Excel* **information disclosure** vulnerability tracked in the Microsoft Security Update Guide. Microsoft maps the issue to **CWE-79** (improper neutralization of input during web page generation / XSS) and provides CVSS v3.1 scoring indicating network-reachable exploitation conditions with high confidentiality impact (vector `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N`). The advisory is available via MSRC’s Update Guide endpoints (including RSS, PowerShell, API, and CSAF links) to support patch/vulnerability management workflows. No additional incident context, exploitation details, or third-party reporting is included in the provided material beyond the MSRC advisory metadata and scoring.
Jul 12, 2026
NVIDIA disclosed Security Bulletin **5865** for **NVIDIA Triton Inference Server**, publishing advisory materials and associated MITRE-format CVE records for five vulnerabilities: `CVE-2026-47606`, `CVE-2026-47627`, `CVE-2026-47628`, `CVE-2026-47629`, and `CVE-2026-47630`. The bulletin was released through NVIDIA's product-security repository with CSAF, Markdown, checksum, and CVE JSON files, indicating a coordinated vendor advisory covering multiple issues in the inference-serving platform. The most severe issue publicly detailed is **`CVE-2026-47627`**, a **critical** path traversal vulnerability (`CWE-22`) affecting **NVIDIA Triton Inference Server on Linux** in versions **0.0 through 26.05**. The CVE record assigns a **CVSS v3.1 score of 9.8** with vector `AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`, and NVIDIA states that successful exploitation could lead to **denial of service**.
Aug 18, 2026