PT-2026-98902

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 3.13.0 through 3.13.14 RabbitMQ versions 4.0.x through 4.0.19 RabbitMQ versions 4.1.x through 4.1.10 RabbitMQ versions 4.2.x through 4.2.5 Description An atom table exhaustion issue exists in the management API. The PUT...

PT-2026-98923

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 4.2.0 through 4.2.8 RabbitMQ versions 4.3.0 through 4.3.2 Description The Shovel parameter parser converts attacker-controlled runtime parameter values into non-garbage-collected Erlang atoms before bounding them or checking ...

CVE-2026-51772

A Server-Side Request Forgery SSRF vulnerability exists in the Image API v2 of OpenStack Glance. When the showmultiplelocations configuration option is enabled in glance-api.conf, an authenticated attacker can manipulate the locations attribute of an image in the queued state by sending a crafted...

PT-2026-98356

Name of the Vulnerable Software and Affected Versions Elementor Website Builder versions 4.3.0 through 4.3.1 Elementor Pro versions 4.3.0 through 4.3.1 Description A Cross-Site Request Forgery CSRF flaw exists where a logged-in administrator can be tricked into opening a crafted link, leading to...

CVE-2026-6086: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/serial-number-types' that allow the injection and persistence of malicious JavaScript code through parameters such as...

PT-2026-99072

Name of the Vulnerable Software and Affected Versions GLPI versions 11.0.0 through 11.0.7 Description An issue exists where a low-privileged authenticated user can utilize the API v2 to execute update operations that are typically restricted within the user interface. This occurs because the API...

CVE-2026-53627: Missing Authorization

GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a low-privileged authenticated user can use the new API v2 to perform update operations that the same user is normally forbidden to perform through the user interface. The API update flow does not consistently...

PT-2026-98556

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/sched component where a batched RTM NEWACTION request can lead to memory and resource leaks. When replacing an existing action, the tcf idr check alloc functio...

PT-2026-98644

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the s390 debug component. This occurs because a null-id check was incorrectly removed from the debug set level function, which can lead to a system...

PT-2026-98818

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.8 and 6.18 LTS Description An issue exists in the drm/virtio component where the virtio-gpu driver fails to correctly use the DMA API for resource backing on Xen PV domains. In these domains, page addresses do not...

CVE-2026-56723: Incorrect Authorization

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, a customer who can view a ticket cannot see internal ticket articles through the article listing API. However, the same customer can directly request an attachment belonging to an internal article via the attachme...

com.gerritforge:events-broker (>=3.0.0, <=3.8.0-rc5), com.gerritforge:global-refdb (>=0.1.1, <=3.8.1) potentially affected by CVE-2026-87722 via com.google.gerrit:gerrit-plugin-api (>=3.0.2, <=3.8.1)

com.google.gerrit:gerrit-plugin-api MAVEN version =3.0.2, =3.0.0, =0.1.1, =3.8.1 Source cves: CVE-2026-87722 Source advisory: MEND:CVE-2026-87722...

CVE-2026-87722 Regular Expression Denial of Service (ReDoS) in Search Query Predicates and REST Filter Endpoints in Gerrit Code Review

Uncontrolled Resource Consumption CWE-400 / CWE-1333 in regex search query predicates such as RegexProjectPredicate, RegexRefPredicate, RegexPathPredicate, and sibling predicates and REST regex filter endpoints RegexListSearcher /projects/?r= and RefFilter /projects/project/branches/?r= in Gerrit...

com.gerritforge:events-broker (>=3.0.0, <=3.8.0-rc5), com.gerritforge:global-refdb (>=0.1.1, <=3.8.1) potentially affected by CVE-2026-87721 via com.google.gerrit:gerrit-plugin-api (>=3.0.2, <=3.8.1)

com.google.gerrit:gerrit-plugin-api MAVEN version =3.0.2, =3.0.0, =0.1.1, =3.8.1 Source cves: CVE-2026-87721 Source advisory: MEND:CVE-2026-87721...

com.gerritforge:events-broker (>=3.0.0, <=3.8.0-rc5), com.gerritforge:global-refdb (>=0.1.1, <=3.8.1) potentially affected by CVE-2026-87720 via com.google.gerrit:gerrit-plugin-api (>=3.0.2, <=3.8.1)

com.google.gerrit:gerrit-plugin-api MAVEN version =3.0.2, =3.0.0, =0.1.1, =3.8.1 Source cves: CVE-2026-87720 Source advisory: MEND:CVE-2026-87720...

CVE-2026-93354 Taskview Community Missing Authentication via OAuth Dynamic Client Registration

Taskview Community before 1.56.0 contains a missing authentication vulnerability that allows unauthenticated attackers to register arbitrary OAuth clients and take over user accounts by exploiting the OAuth 2.0 Dynamic Client Registration endpoint, which is enabled by default and requires no...

GHSA-JMG2-RCXH-W8Q3 @rsdoctor/rspack-plugin has Unauthenticated HTTP API that Exposes Project Source Code and Build Metadata

Summary The default Rsdoctor report HTTP server started by @rsdoctor/rspack-plugin binds to all network interfaces 0.0.0.0 and serves a POST /api/data/key endpoint with no authentication and wildcard CORS Access-Control-Allow-Origin: . Any network-adjacent or remote attacker can send a single...

@rsdoctor/rspack-plugin has Unauthenticated HTTP API that Exposes Project Source Code and Build Metadata

Summary The default Rsdoctor report HTTP server started by @rsdoctor/rspack-plugin binds to all network interfaces 0.0.0.0 and serves a POST /api/data/key endpoint with no authentication and wildcard CORS Access-Control-Allow-Origin: . Any network-adjacent or remote attacker can send a single...

Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces

Impact In Cilium clusters using Gateway API, users with permissions to create or update namespaced HTTPRoutes can mirror HTTP traffic to any Service in any namespace, bypassing the ReferenceGrant authorization mechanism. Gateway API functionality is disabled by default. Patches This issue affects...

GHSA-W7C2-W76W-5HMJ Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces

Impact In Cilium clusters using Gateway API, users with permissions to create or update namespaced HTTPRoutes can mirror HTTP traffic to any Service in any namespace, bypassing the ReferenceGrant authorization mechanism. Gateway API functionality is disabled by default. Patches This issue affects...