PT-2026-113262

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

PT-2026-112272

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An issue involving type confusion occurs when a resource is accessed using an incompatible type. This allows an authorized attacker to execute arbitrary code over a network, potentially...

CVE-2026-11713: Incorrect Authorization

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled...

CVE-2026-88083: Stack-based Buffer Overflow

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-110131: Missing Authorization

ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/id endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles. Attackers can request sequential article ids or supply isDraft=true or...

CVE-2026-69830: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-85886: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-110100: Missing Authorization

Jorani before 1.0.4 contains a missing authorization vulnerability in Contracts::import that allows any authenticated user to import days off into any contract from an arbitrary URL. Attackers can submit a contract id and URL via POST to overwrite non-working-day calendars and abuse getheaders an...

PT-2026-112928

Name of the Vulnerable Software and Affected Versions Windows Server affected versions not specified Description An out-of-bounds read in the Network File System NFS allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Recommendations At the momen...

CVE-2026-108971: Improper Verification of Cryptographic Signature

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfddecode of the file bootloaderregion.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may b...

CVE-2026-67625: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

PT-2026-112979

Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

PT-2026-113056

Name of the Vulnerable Software and Affected Versions Network Policy Server affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose sensitive information over a network, which can subsequently affect the system. Recommendations At the moment,...

CVE-2026-88171: Double Free

Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-88171: Windows DHCP Server Remote Code Execution Vulnerability

Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-94512: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-108127: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-108129: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-85919: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-105442: Deserialization of Untrusted Data

IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 Liberty could allow a remote attacker to cause a denial of service caused by an insecure deserialization in the messaging service...