CVE-2026-96421

Medium5.5Published on September 29, 2026

USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS score5.5 / 10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness type (CWE)CWE-1325

FortiMail and NetScaler Exploitation Drives an Urgent Enterprise Patch Cycle

FortiMail path traversal and NetScaler SAML flaw under active exploit join CISA KEV, forcing urgent patching plus PHP, PaperCut and Spectre fixes.

This product uses the NVD API but is not endorsed or certified by the NVD.