PT-2026-7328

Name of the Vulnerable Software and Affected Versions Frappe versions prior to 14.99.14 Frappe versions prior to 15.94.0 Description A crafted malicious signup URL for a Frappe site could lead to an open redirect or reflected cross-site scripting XSS, depending on the crafted payload, when a user...

PT-2026-7399

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 1607 versions prior to 10.0.14393.8868 Microsoft Windows 10 1809 versions prior to 10.0.17763.8389 Microsoft Windows 10 21H2 versions prior to 10.0.19044.6937 Microsoft Windows 10 22H2 versions prior to 10.0.19045.6937...

Microsoft Windows Remote Access Connection Manager 安全漏洞

Microsoft Windows Remote Access Connection Manager is a Windows service provided by Microsoft that manages VPN connections from your computer to the Internet. If this service is disabled, VPN client applications will not be able to start. There are security vulnerabilities in Microsoft Windows...

PT-2026-7244

Name of the Vulnerable Software and Affected Versions Okulistik versions through 21102025 Description The software contains a Server-Side Request Forgery SSRF vulnerability that allows Server Side Request Forgery. The vulnerability exists due to insufficient input validation, potentially allowing...

Fortinet FortiOS 安全漏洞

Fortinet FortiOS is a security operating system developed by Fortinet Corporation, specifically for use on the FortiGate network security platform. This system provides users with various security features, including firewalls, antivirus protection, IPSec/SSLVPN, web content filtering, and...

PT-2026-7263

Name of the Vulnerable Software and Affected Versions Sarman Soft CMS versions through 10022026 Description The software contains an Execution After Redirect EAR issue that allows for JSON Hijacking, also known as JavaScript Hijacking, and Authentication Bypass. This flaw occurs due to improper...

PT-2026-7471

The affected products are vulnerable to an uncaught exception that could allow an unauthenticated attacker to remotely crash core PI services resulting in a denial-of-service...

PT-2026-7294

Name of the Vulnerable Software and Affected Versions versions prior to 2025-27572 Description A hypervisor may allow an information disclosure. An authorized adversary with a privileged user and a high complexity attack may enable data exposure. This may occur via local access when attack...

PT-2026-7266

Name of the Vulnerable Software and Affected Versions Ergosis Security Systems Computer Industry and Trade Inc. ZEUS PDKS versions 1.0.5.10 through 10022026 Description The software contains an Improper Neutralization of Special Elements used in an SQL Command issue, specifically a SQL Injection...

Fortinet FortiSandbox 跨站脚本漏洞

Fortinet FortiSandbox is an APT Advanced Persistent Threat protection device developed by the American company Fortinet. This device offers features such as dual sandbox technology, dynamic threat intelligence systems, a real-time control panel, and reporting capabilities. Versions of Fortinet...

PT-2026-7262

Name of the Vulnerable Software and Affected Versions lrzip versions up to 0.651 Description A flaw exists in lrzip that involves a use-after-free condition within the lzma decompress buf function located in the stream.c file. Local access is required for exploitation. The exploit has been public...

PT-2026-7419

Name of the Vulnerable Software and Affected Versions FastGPT versions 4.14.0 through 4.14.5 Description FastGPT, an AI Agent building platform, has an issue where the plugin system can be accessed directly through the API endpoint /api/plugin/xxx without authentication. This affects versions...

Intel Chipset Firmware February 2026 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Converged Security and Management Engine Intel® CSME, some Intel® Active Management Technology Intel® AMT, and some Intel® Standard Manageability, which might allow denial of service or information disclosure. Intel is...

CVE-2025-68777 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68777 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-68211 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68211 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-68254 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68254 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-69421 affecting package edk2 for versions less than 20240524git3e722403cd16-14

CVE-2025-69421 affecting package edk2 for versions less than 20240524git3e722403cd16-14. A patched version of the package is available...

CVE-2026-25957

Cube is a semantic layer for building data applications. From 1.1.17 to before 1.5.13 and 1.4.2, it is possible to make the entire Cube API unavailable by submitting a specially crafted request to a Cube API endpoint. This vulnerability is fixed in 1.5.13 and 1.4.2...

CVE-2026-25957

CVE-2026-25957 affects Cube versions from 1.1.17 up to (but not including) 1.5.13 and 1.4.2, where a specially crafted request can make the entire Cube API unavailable. The issue is fixed in 1.5.13 and 1.4.2. Impact is availability disruption; no confidentiality or integrity impact is indicated. ...

-fides-amor-et-lux (1.0.0), 0xppl-solana-portfolio (1.0.0) +13607 more potentially affected by CVE-2026-25639 via axios (>=1.0.0, <=1.13.4)

axios NPM version =1.0.0, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =2.0.0, =2.0.200 and more Source cves: CVE-2026-25639 Source advisory: SNYK:JS-AXIOS-15252993...