CWE-410: Insufficient Resource Pool
The product's resource pool is not large enough to handle peak demand, which allows an attacker to prevent others from accessing the resource by using a (relatively) large number of requests for resources.
21 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2025-41653 — Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet Switches
- CVE-2025-20103 — Insufficient resource pool in the core management mechanism for some Intel(R) Processors may allow an authenticated user
- CVE-2025-12986 — Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P Devices
- CVE-2025-0453 — Denial of Service through Batched Queries in GraphQL in mlflow/mlflow
- CVE-2025-27694 — Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insufficient Resource Pool vulnerability. An unauthe
- CVE-2026-34019 — BIG-IP BFD vulnerability
- CVE-2026-58218 — Samba: dns signing dos via tkey name cache exhaustion
- CVE-2025-2134 — IBM Jazz Reporting Service Denial of Service
Recently published
- CVE-2026-58218 — Samba: dns signing dos via tkey name cache exhaustion
- CVE-2026-34019 — BIG-IP BFD vulnerability
- CVE-2025-2134 — IBM Jazz Reporting Service Denial of Service
- CVE-2025-12986 — Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P Devices
- CVE-2025-41653 — Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet Switches
- CVE-2025-20103 — Insufficient resource pool in the core management mechanism for some Intel(R) Processors may allow an authenticated user
- CVE-2025-27694 — Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insufficient Resource Pool vulnerability. An unauthe
- CVE-2025-0453 — Denial of Service through Batched Queries in GraphQL in mlflow/mlflow