PT-2026-107956

Name of the Vulnerable Software and Affected Versions GlavSoft TightVNC Server for Windows versions prior to 2.8.88 Description A local authenticated user can execute arbitrary code with SYSTEM privileges due to an uncontrolled search path element. The DynamicLibrary::init function and ThemeLib...

PT-2026-107957

Name of the Vulnerable Software and Affected Versions IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22 IBM DataPower Gateway versions 10.6.0.0 through 10.6.0.10 IBM DataPower Gateway versions 10.6.1 through 10.6.6 IBM DataPower Gateway versions 11.0.0.0 through 11.0.0.2 Description A...

KLA91326 Multiple vulnerability in Microsoft Dynamics

Multiple vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to bypass security restrictions, execute arbitrary code. Original advisories CVE-2026-88131 Exploitation Related products Microsoft-Dataverse CVE list CVE-2026-88131 critical KB list Solution...

PT-2026-107788

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 10.0.1 Description A memory buffer overflow exists in the internal diagnostic and route validation routines of the Fabric Shortest Path First FSPF protocol component. An input processing flaw allows incoming...

PT-2026-107855

Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately be processed. A malicious actor with basic access can supply crafted input to execute arbitrary code...

PT-2026-108016

Name of the Vulnerable Software and Affected Versions IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22 IBM DataPower Gateway versions 10.6.0.0 through 10.6.0.10 IBM DataPower Gateway versions 10.6.1 through 10.6.6 IBM DataPower Gateway versions 11.0.0.0 through 11.0.0.2 Description A...

ROS-20261008-73-0318

The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261008-73-0071

The vulnerability in the kernel-lt is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20261008-73-0068

The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-107868

Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server...

PT-2026-108226

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 Description A protection mechanism failure allows a remote authenticated attacker to execute arbitrary code. Recommendations Upda...

PT-2026-108240

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A buffer overflow allows a remote attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is...

PT-2026-108708

Name of the Vulnerable Software and Affected Versions PraisonAI affected versions not specified Description The plugin manager loads and executes arbitrary .py files from the .praisonai/plugins/ directories located at both the project level and the user home. This occurs through the use of...

ROS-20261008-73-0297

The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-107958

Name of the Vulnerable Software and Affected Versions IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22 IBM DataPower Gateway versions 10.6.0.0 through 10.6.0.10 IBM DataPower Gateway versions 10.6.1 through 10.6.6 IBM DataPower Gateway versions 11.0.0.0 through 11.0.0.2 Description A...

PT-2026-107776

A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly...

PT-2026-108266

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A path traversal issue in the Sniffer component allows a remote attacker to execute arbitrary code. Path traversal is a flaw that allows an attacker to access files and...

CVE-2026-93699: Improper Neutralization of Argument Delimiters in a Command

Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server...

ROS-20261008-73-0249

The vulnerability in the kernel-lt is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-15784: Out-of-bounds Write

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write...