CVE-2026-81858

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server...

CVE-2026-108939

A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function isglobalip of the file mistralrs-server-core/src/mediasource.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been...

CVE-2026-108940

A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibrationapply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument savecimatrix results in path traversal. The attack may be initiated remotely. The...

CVE-2026-110100: Missing Authorization

Jorani before 1.0.4 contains a missing authorization vulnerability in Contracts::import that allows any authenticated user to import days off into any contract from an arbitrary URL. Attackers can submit a contract id and URL via POST to overwrite non-working-day calendars and abuse getheaders an...

PT-2026-113393

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.10 Description An authentication bypass flaw exists when the samlWeb-2.0 feature is enabled. This issue allows unauthenticated remote attackers to bypass enterprise...

KB5126835: Windows Server 2012 Security Update (October 2026)

The remote Windows host is missing security update 5126835. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

KB5126836: Windows Server 2012 R2 Security Update (October 2026)

The remote Windows host is missing security update 5126836. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

CentOS Linux 6 [TuxCare] Security Update: httpd / httpd-devel / httpd-manual / httpd-tools / mod_ssl (CENTOS6:CLSA-2026:1791487835)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1791487835 advisory. - Stack-based buffer overflow in modvhostalias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote...

PT-2026-112332

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose sensitive information over a network, which can subsequently affect the system. Recommendations At the moment, there is no...

CVE-2026-70244: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network...

PT-2026-112339

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Server-side request forgery SSRF allows an authorized attacker to elevate privileges over a network. SSRF is a flaw where a server is tricked into making requests to an...

CVE-2026-70083: Incorrect Authorization

Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally...

CVE-2026-70167: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in DNS Server allows an authorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70167: Windows Domain Name Service Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in DNS Server allows an authorized attacker to execute code over a network...

PT-2026-112272

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An issue involving type confusion occurs when a resource is accessed using an incompatible type. This allows an authorized attacker to execute arbitrary code over a network, potentially...

CVE-2026-70087: Incorrect Authorization

Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-70087: Role: DNS Server Security Feature Bypass Vulnerability

Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally...

CVE-2026-70085: Missing Authorization

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-70085: Role: DNS Server Tampering Vulnerability

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

CVE-2026-70071: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally...