Microsoft SQL Server: CVE-2026-88083: Microsoft SQL Server Remote Code Execution Vulnerability

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-88083: Stack-based Buffer Overflow

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-88171: Double Free

Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

Microsoft SQL Server: CVE-2026-88081: Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-88081: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-85811: Network Policy Server (NPS) Remote Code Execution Vulnerability

Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-85811: Use After Free

Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over an adjacent network...

Microsoft Windows: CVE-2026-70071: Role: DNS Server Tampering Vulnerability

Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally...

CVE-2026-93895: Improper Access Control

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods...

Microsoft Windows: CVE-2026-83635: Role: DNS Server Denial of Service Vulnerability

Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network...

CVE-2026-83753: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83771: Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability

Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network...

PT-2026-111549

Name of the Vulnerable Software and Affected Versions Parse Server versions 5.4.0 through 8.6.95 Parse Server versions 9.0.0 through 9.10.2-alpha.4 Description Transactional batch state is shared across concurrent requests, allowing a transactional batch request from one client to interfere with...

PT-2026-111653

🚨 CVE-2026-103965 An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not...

PT-2026-111575

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.5 and 9.0 Description A flaw in the CSIv2 inbound propagation handler allows a remote attacker to bypass authentication. Recommendations At the moment, there is no information about a newer version...

PT-2026-111380

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC Drive Controller CPU 1504D TF affected versions not specified Description Devices do not properly restrict executable content within imported trace files. An attacker could social engineer an authorized user with the "Read...

PT-2026-111353

Ghost is a Node.js content management system. From 1.20.0 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to read JSON files outside of the active theme's directory, potentially exposing server configuration secrets. This issue is...

PT-2026-111402

Name of the Vulnerable Software and Affected Versions RUGGEDCOM CROSSBOW versions prior to V6.0 Description Insufficient server-side authorization checks for requests to schedule special operations allow an authenticated attacker with minimal privileges to schedule unauthorized operations on the...

KB5126651: Windows 10 version 1809 / Windows Server 2019 Security Update (October 2026)

The remote Windows host is missing security update 5126651. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

KB5126868: Windows 10 Version 1607 / Windows Server 2016 Security Update (October 2026)

The remote Windows host is missing security update 5126868. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...