CVE-2026-40506: Improper Limitation of a Pathname to a Restricted Directory

OpenEMR before 8.2.0 contains a path traversal vulnerability in the standardtablesmanage.php interface where the db GET parameter is passed without validation to tempdircleanup, which joins the value to the PHP temporary directory path and recursively deletes the resulting directory. Attackers ca...

PT-2026-73195

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub 44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptest macaddress. Such manipulation of the argument macaddress leads to command injection. The attack may be launched remotely. The exploi...

PT-2026-76687

Name of the Vulnerable Software and Affected Versions UpTrain versions prior to 0.7.2 Description An issue exists in the /new run endpoint that allows remote code execution. Authenticated users can execute arbitrary code on the host system, typically within the Docker container, by manipulating t...

PT-2026-82818

Fix: PR 7906 ether/etherpad. A set of medium/low hardening fixes: - Weak RNG for tokens CWE-330: author/session/readonly IDs were generated with Math.random client and server. Now use crypto.getRandomValues. - Login timing / no failure delay CWE-208/CWE-307: the OIDC interaction login used a...

PT-2026-76792

Name of the Vulnerable Software and Affected Versions JeecgBoot version 3.9.2 Description An issue in the JeecgBoot AI Chat Module allows a remote attacker to execute arbitrary code by manipulating the files parameter. Recommendations At the moment, there is no information about a newer version...

PT-2026-76883

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description Remote SQL injection is possible due to improper processing of the /edit subject1.php endpoint. An attacker can exploit this by manipulating the ID variable to execute...

CVE-2026-67926

The JeecgBoot v.3.9.2 software is affected by a vulnerability in its AI Chat Module that allows a remote attacker to achieve arbitrary code execution . The flaw is triggered via the files Parameter . The impact is rated as CRITICAL with a CVSS v3.1 score of 9.8 , indicating high severity across c...

PT-2026-76678

Name of the Vulnerable Software and Affected Versions UpTrain versions prior to 0.7.2 Description UpTrain is an open-source platform used to evaluate and improve generative AI applications. The /create project endpoint allows authenticated users to execute arbitrary code on the host system,...

EFI/CPER Component DoS

The EFI/CPER component vulnerability in the Linux kernel is related to errors in handling length parameters. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

CVE-2026-67926

An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module...

PT-2026-73258

Discourse is an open-source discussion platform. From 2026.1.0 until 2026.1.7, 2026.6.2, 2026.7.1, and 2026.8.0, anyone able to run a parameterized Data Explorer query, including non-staff members of a group a query is shared with, could craft parameter values that escaped the intended query and...

PT-2026-76679

Name of the Vulnerable Software and Affected Versions UpTrain versions prior to 0.7.2 Description UpTrain is an open-source platform used to evaluate and improve generative AI applications. The '/add prompts' endpoint is susceptible to remote code execution, allowing authenticated users to execut...

CVE-2026-67926: Improper Control of Generation of Code

An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module...

CVE-2025-27770: Improper Neutralization of Special Elements in Output Used by a Downstream Component

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /createproject endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may b...

PT-2026-73189

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewpatient.php. Such manipulation of the argument delid leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and ma...

PT-2026-73417

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100111)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100111 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Resolve soft lockup issue when opening /dev/sgX The parameter defreservedsize defines t...

PT-2026-73219

Name of the Vulnerable Software and Affected Versions code-projects Online Shopping System version 1.0 Description A remote cross site scripting issue exists in the offersmail.php file. This occurs when the email argument is manipulated, allowing an attacker to execute malicious scripts in the...

PT-2026-73378

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands ...

CVE-2026-19349

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. Before redirecting to the identity provider, extractFormIn...