Atlassian Bamboo, Bitbucket, Confluence, Crucible, Fisheye and Jira are affected by multiple vulnerabilities enabling code execution and security bypasses.
An unpatched denial-of-service vulnerability in Alibaba’s XQUIC library enables HTTP/3 server crashes through simple, protocol-compliant QPACK requests; Alibaba has not responded since April 2026.
Multiple vulnerabilities in PowerDNS allow remote attackers to conduct DoS attacks, cache poisoning, and bypass security checks without authentication.
Multiple vulnerabilities in NGINX products compromise availability, integrity, and system security; extensive data manipulation and code execution are possible.
