PT-2026-107308

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description The API endpoint GET /api/v1/repos/owner/repo/media/filepath fails to include the proper content type and disposition headers when serving files up to 1 KiB stored directly in Git rather than i...

PT-2026-107202

A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gain administrative control of the affected system...

CVE-2026-96594: Improper Neutralization of Input During Web Page Generation

The Gitea API endpoint GET /api/v1/repos/owner/repo/media/filepath wrote files of up to 1 KiB that are stored directly in Git, not in LFS, to the response without the content type and disposition headers Gitea uses for user content. An HTML file committed to a repository was therefore rendered by...

PT-2026-107289

The Gitea push mirror API checked whether the repository owner, instead of the requesting user, may use local file system paths. On instances with security IMPORT LOCAL PATHS = true, a repository administrator who is not allowed to import local paths could add a push mirror to a local path on the...

PT-2026-107294

The Gitea API routes for issue attachments /api/v1/repos/owner/repo/issues/index/assets/attachment id also accepted attachments that belong to comments on the issue. Because the author of an issue may edit and delete the issue's attachments, a user who opened an issue could rename or delete...

CVE-2026-105268: Authorization Bypass Through User-Controlled Key

The Gitea API routes for issue attachments /api/v1/repos/owner/repo/issues/index/assets/attachmentid also accepted attachments that belong to comments on the issue. Because the author of an issue may edit and delete the issue's attachments, a user who opened an issue could rename or delete...

CVE-2026-86684: Incorrect Authorization

The Gitea push mirror API checked whether the repository owner, instead of the requesting user, may use local file system paths. On instances with security IMPORTLOCALPATHS = true, a repository administrator who is not allowed to import local paths could add a push mirror to a local path on the...

PT-2026-107126

Name of the Vulnerable Software and Affected Versions AOS-S affected versions not specified Description A privilege escalation issue exists in the API of AOS-S. This flaw allows an authenticated user with read-only permissions to elevate their privileges and obtain full administrative access to t...

PT-2026-106848

NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpRequest object to the Jinja2 template contex...

CVE-2026-39794: Missing Authorization

Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API = 1.6.3 versions...

CVE-2026-105849: Insertion of Sensitive Information Into Sent Data

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, users with ordinary read access to other authentication documents in a collection with useAPIKey enabled can obtain active API keys and exercise t...

PT-2026-106342

The ACPT Premium plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is due to missing capability check on the REST API form creation endpoint and unsandboxed Twig environment rendering email templates. This makes ...

CVE-2026-105797: Improper Neutralization of Special Elements used in an OS Command

SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. In versions 0.261.003 and 0.261.027, an authorization ordering flaw in POST /api/user/plugins allows an authenticated low-privileged user to omit the top-level MCP type so tha...

PT-2026-106883

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A missing authorization in an API allows a remote attacker to leak sensitive information. This issue can be exploited through social engineering by using a crafted Chrome extension...

PT-2026-107092

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An incorrect calculation in an API allows a remote attacker to spoof UI elements through a crafted Chrome extension, provided the attacker uses social engineering to induce the user to...

PT-2026-107094

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in an API allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one origin...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : OpenStack Aodh and Watcher vulnerability (USN-8870-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8870-1 advisory. Chen YuXiang discovered that OpenStack Aodh did not correctly enforce project scoping in its alarm list API and that the OpenStack Watcher...

PT-2026-107209

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager affected versions not specified Description A SQL injection flaw exists in the API of ClearPass Policy Manager. This issue allows a remote authenticated attacker with administrative privileges to perform SQL injection...

CVE-2026-105783: Origin Validation Error

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, when Joplin Desktop is running with the opt-in Web Clipper server enabled, the server in packages/lib/ClipperServer.ts sends Access-Control-Allow-Origin: and allows an...

CVE-2026-105486: Missing Authentication for Critical Function

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit is now public and...