CVE-2026-105193: Inadequate Encryption Strength

The Booking Calendar WordPress plugin before 11.8 does not generate its per-booking access hashes with sufficient entropy, deriving each from a low-entropy time-seeded value, which can allow unauthenticated attackers who are able to determine a booking's creation time to predict the hash and then...

PT-2026-108269

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A buffer overflow allows a remote attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is...

CVE-2026-107335: Improper Handling of Highly Compressed Data (Data Amplification)

Malcolm's upload-processing pipeline scripts/safe-extract.py enforces entry-count, nesting-depth, and total-uncompressed-byte limits when extracting container archives zip/tar/rar/7z via libarchive, but those limits are not applied when the uploaded file is a single-stream compressed format .gz,...

PT-2026-107858

An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and...

PT-2026-108047

Name of the Vulnerable Software and Affected Versions Pydantic AI versions 1.34.0 through 1.107.4 Pydantic AI versions 2.0.0 through 2.29.9 Description The Agent.to web and clai web development chat server fails to validate the Host header of incoming requests. This allows a malicious website...

PT-2026-108056

Name of the Vulnerable Software and Affected Versions msgpack5 versions prior to 6.1.0 Description Decoding a negative signed 64-bit integer modifies the bytes in the input buffer provided by the caller during value computation. This can lead to silent data corruption for applications that reuse ...

PT-2026-108179

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A signature verification bypass exists in the patch installer. This flaw allows an attacker with local access to execute arbitrary code with root privileges, which is the highest level of...

PT-2026-108175

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.1 Description A heap-based buffer overflow exists in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that...

PT-2026-108182

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An unauthenticated attacker can exploit a path traversal issue within the GIM file-upload functionality to write arbitrary files to the Collector. Path traversal is a technique that allows ...

PT-2026-108225

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 Description An SQL injection flaw allows a remote authenticated attacker to modify data and cause a denial of service. SQL...

PT-2026-108274

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A buffer overrun exists in the TDS Microsoft SQL Server PRELOGIN packet decoder. A remote attacker can send a specially crafted TDS PRELOGIN packet to a network monitored by a...

PT-2026-108280

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.2 and 12.2.2 Description A missing authentication requirement for a critical function allows a remote attacker to execute arbitrary management operations. Recommendations At the moment, there is no...

PT-2026-108270

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.1 IBM Guardium Data Protection version 12.2.2 Description An issue exists where a remote attacker can delete arbitrary files. This occurs because the software fails to properly limit pathnames to a...

PT-2026-108267

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description An issue exists that allows a remote attacker to execute unauthorized SQL statements on security database appliances. This is caused by SQL injection, a technique where...

PT-2026-108273

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.1 IBM Guardium Data Protection version 12.2.2 Description Remote attackers can execute arbitrary commands due to improper neutralization of special elements used in an OS command. This issue occurs when...

PT-2026-108276

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.1 IBM Guardium Data Protection version 12.2.2 Description Improper neutralization of special elements used in an SQL command allows a remote attacker to execute arbitrary SQL commands. This issue is caus...

PT-2026-108176

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Stored cross-site scripting XSS exists in the Quick Search results grid. An unauthenticated attacker capable of influencing monitored database traffic can execute malicious scripts within t...

PT-2026-108173

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A heap-based out-of-bounds read exists in the TDS7 LOGIN7 protocol parser. A remote attacker can exploit this by sending a specially crafted TDS LOGIN7 packet that contains...

PT-2026-108177

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A local privilege escalation exists in the cp wrapper component. A low-privileged local user can exploit this issue to obtain root privileges, allowing them to access or modify sensitive...

PT-2026-108180

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.1 IBM Guardium Data Protection version 12.2.2 Description The edge-controller component lacks proper authentication. This allows an unauthenticated remote attacker to execute arbitrary container images a...