PT-2026-92313

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A use-after-free condition exists in multiple locations caused by improper locking. This issue allows for local escalation of privilege without requiring...

PT-2026-92740

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Open UI. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of this...

PT-2026-92147

Name of the Vulnerable Software and Affected Versions IBM Security Verify Identity Access Reverse Proxy affected versions not specified Description In certain configurations, the software may provide weaker than expected cryptographic validation of user supplied data. Recommendations At the momen...

PT-2026-93223

Name of the Vulnerable Software and Affected Versions Secret Server affected versions not specified Description Under certain conditions, a valid SAML IdP response may be used to impersonate another user. SAML Security Assertion Markup Language is an XML-based standard for exchanging authenticati...

PT-2026-92288

Name of the Vulnerable Software and Affected Versions Bootloader affected versions not specified Description A missing permission check in the Bootloader allows for a local escalation of privilege. This issue enables an attacker to obtain System execution privileges without requiring any user...

PT-2026-92166

Concrete CMS 9.2.0 to 9.5.2 did not enforce per-field edit user properties permissions on the REST API user write endpoints PUT /ccm/api/1.0/users/uID and POST /ccm/api/1.0/users/uID/change password. A user with an update-scoped OAuth token and permission to edit only one non-sensitive field coul...

PT-2026-92291

Name of the Vulnerable Software and Affected Versions Cellular Modem affected versions not specified Description A heap buffer overflow in the Cellular Modem allows for an out-of-bounds write. This issue can be exploited without user interaction to achieve remote escalation of privilege without...

PT-2026-92282

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the code allows for an out-of-bounds write in multiple locations. This condition can be exploited to achieve remote code execution without...

CVE-2026-12910: Missing Authentication for Critical Function

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to bypass SAML SSO sign-in restrictions and authenticate without SSO due to missing...

PT-2026-92163

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.6 through 19.1.7 GitLab CE/EE versions 19.2 through 19.2.5 GitLab CE/EE versions 19.3 through 19.3.1 Description An issue exists where an authenticated user could bypass SAML SSO sign-in restrictions and authenticate...

PT-2026-92121

Name of the Vulnerable Software and Affected Versions Concrete CMS versions 9.0.0 through 9.5.2 Description An authorization check is missing on the user selector autocomplete endpoint '/ccm/system/user/autocomplete', which supports the Preview as User panel and other user-selector components. Th...

PT-2026-92142

Name of the Vulnerable Software and Affected Versions IBM ContextForge MCP Gateway versions prior to 1.0.5 Description An authenticated user can bypass protection mechanisms in the IBM mcp-context-forge component. This occurs because the system performs an incomplete recursive inspection of neste...

PT-2026-92159

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Business Automation affected versions not specified Description An authenticated user can embed arbitrary JavaScript code into the Web UI. This stored cross-site scripting issue allows for the alteration of intended...

CVE-2026-18110: Missing Authorization

Concrete CMS 9 9.0.0 through 9.5.2 does not perform an authorization check on the user selector autocomplete endpoint /ccm/system/user/autocomplete, which backs the "Preview as User" panel and other user-selector components. The endpoint validates only a CSRF-style access token that is bound to t...

ROS-20260915-73-0056

The vulnerability of Microsoft Edge and Google Chrome browser user interfaces is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to replace the interface with a specially created HTML page...

PT-2026-92329

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A logic error in the code across multiple locations allows for a local escalation of privilege. This issue enables an attacker to gain System execution privileg...

PT-2026-92667

Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM component: Order Management. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps -...

PT-2026-92308

Name of the Vulnerable Software and Affected Versions Cellular Modem affected versions not specified Description A logic error in the code allows for possible information disclosure. This flaw could be leveraged to achieve remote code execution without requiring additional execution privileges or...

CVE-2026-79411

Incorrect privilege assignment in the admin user-management component of Webkul Bagisto 2.4.9 allows an authenticated backend user holding only the settings.users.edit permission to escalate to full administrator. The user-update endpoint route admin.settings.users.update, UserController::update...

PT-2026-92293

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the code allows for a permission bypass in multiple locations. This issue can lead to local escalation of privilege, granting System execution...