CWE-406

22 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

Critical 0High 12Medium 8Low 2Not scored 0

CVEs per yearBy the year they were published

CVE-2022-0028
PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering
Palo Alto Networks · Cloud NGFW
ExploitedHigh8.6

CVE-2026-106465
Missing HelloVerifyRequest cookie validation in the NetX Secure DTLS server
Eclipse Foundation · Eclipse ThreadX NetX Duo
Medium6.9
CVE-2026-16515
ICMPv6 error messages sent for multicast-destined packets and non-unique source addresses enable network amplification in Zephyr's IPv6 stack
zephyrproject · zephyr
Medium4.7
CVE-2026-86202
PocketMine-MP before 5.39.2 Network Amplification via ActorEventPacket
pmmp · PocketMine-MP
Medium5.3
CVE-2026-68080
Apache Qpid Broker-J: Unbounded echo flow responses can lead to denial of service
Apache Software Foundation · Apache Qpid Broker-J
Medium6.5
CVE-2026-54609
QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding
Quiet-Terminal-Interactive · QTINeon
High8.6
CVE-2026-50045
'max-global-quota' reset by DNSSEC validation restarts
NLnet Labs · Unbound
Medium5.3
CVE-2026-45557
Technitium DNS Server excessive DNSSEC requests
Technitium · DNS Server
Medium6.9
CVE-2025-58066
DoS Vulnerability in ntpd-rs
pendulum-project · ntpd-rs
Medium5.3
CVE-2021-38135
Possible External service interaction Vulnerability in OpenText iManager
OpenText · iManager
High8.6
CVE-2023-49203
Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb manipulation causes accumulation of…
Product not named
High7.5