CWE-408 · 9 records

Incorrect Behavior Order: Early Amplification

CVEs in this class

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2026-41405No exploit	OpenClaw < 2026.3.31 - Resource Exhaustion via Unauthenticated MS Teams Webhook Body Parsingopenclaw · openclaw · CWE-408 Pre-auth Auth bypass	High8.7	—	0.4%	Apr 28, 2026
31Monitor	CVE-2026-46015No exploit	tcp: call sk_data_ready() after listener migrationlinux · linux kernel · CWE-408	High7.8	—	0.1%	May 27, 2026
30Monitor	CVE-2020-1657No exploit	Junos OS: SRX Series: An attacker sending spoofed packets to IPSec peers may cause a Denial of Service.juniper · junos · CWE-408 Pre-auth Denial of service	High7.5	—	1.2%	Oct 16, 2020
30Monitor	CVE-2026-11605No exploit	Unnecessary validation of DNSSEC signed recordsisc · bind 9 · CWE-408 Pre-auth Denial of service	High7.5	—	0.6%	Jul 22, 2026
30Monitor	CVE-2022-2576No exploit	In Eclipse Californium version 2.0.0 to 2.7.2 and 3.0.0-3.5.0 a DTLS resumption handshake falls back to a DTLS full handshake on a parametereclipse · californium · CWE-408 Pre-auth Denial of service	High7.5	—	0.6%	Jul 29, 2022
27Monitor	CVE-2026-41374No exploit	OpenClaw < 2026.3.31 - Resource Consumption via Discord Audio Preflight Before Member Authorizationopenclaw · openclaw · CWE-408 Pre-auth	Medium6.9	—	0.4%	Apr 28, 2026
27Monitor	CVE-2026-41331No exploit	OpenClaw < 2026.3.31 - Resource Consumption via Unauthorized Telegram Audio Preflight Transcriptionopenclaw · openclaw · CWE-408 Pre-auth	Medium6.9	—	0.2%	Apr 20, 2026
22Monitor	CVE-2026-104032No exploit	Sssd: sssd: denial of service via unprivileged autofs cache invalidationfedoraproject · sssd · CWE-408 Local privilege escalation Denial of service	Medium5.5	—	0.0%	Oct 6, 2026
21Monitor	CVE-2026-3592No exploit	Amplification vulnerabilities via self-pointed glue recordsisc · bind · CWE-408 Pre-auth Denial of service	Medium5.3	—	0.4%	May 20, 2026

CVE-2026-41405
34Monitor
OpenClaw < 2026.3.31 - Resource Exhaustion via Unauthenticated MS Teams Webhook Body Parsing
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
openclaw · openclawApr 28, 2026
CVE-2026-46015
31Monitor
tcp: call sk_data_ready() after listener migration
HighCVSS 7.8No exploitEPSS 0%
linux · linux kernelMay 27, 2026
CVE-2020-1657
30Monitor
Junos OS: SRX Series: An attacker sending spoofed packets to IPSec peers may cause a Denial of Service.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
juniper · junosOct 16, 2020
CVE-2026-11605
30Monitor
Unnecessary validation of DNSSEC signed records
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
isc · bind 9Jul 22, 2026
CVE-2022-2576
30Monitor
In Eclipse Californium version 2.0.0 to 2.7.2 and 3.0.0-3.5.0 a DTLS resumption handshake falls back to a DTLS full handshake on a parameter
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
eclipse · californiumJul 29, 2022
CVE-2026-41374
27Monitor
OpenClaw < 2026.3.31 - Resource Consumption via Discord Audio Preflight Before Member Authorization
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
openclaw · openclawApr 28, 2026
CVE-2026-41331
27Monitor
OpenClaw < 2026.3.31 - Resource Consumption via Unauthorized Telegram Audio Preflight Transcription
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
openclaw · openclawApr 20, 2026
CVE-2026-104032
22Monitor
Sssd: sssd: denial of service via unprivileged autofs cache invalidation
MediumCVSS 5.5No exploitEPSS 0%
- Local privilege escalation
- Denial of service
fedoraproject · sssdOct 6, 2026
CVE-2026-3592
21Monitor
Amplification vulnerabilities via self-pointed glue records
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Denial of service
isc · bindMay 20, 2026

All vulnerability classes