PT-2026-96786

Name of the Vulnerable Software and Affected Versions MISP affected versions not specified Description MISP registers the PHP phar stream wrapper in its web and console entry points. This wrapper causes PHP to treat phar archives as directories, leading to two security risks: any filesystem...

PT-2026-97005

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager Forms JEE affected versions not specified Description Improper input validation allows an attacker with high privileges to execute arbitrary code in the context of the current user. This issue does not require user...

PT-2026-97075

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Remote authenticated attackers can execute arbitrary code due to improper validation of a specified quantity. Recommendations At the moment,...

PT-2026-97076

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description An adjacent-network attacker could execute arbitrary code due to the deserialization of untrusted data. Deserialization is the process of...

CVE-2026-17637: Deserialization of Untrusted Data

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data...

PT-2026-96917

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Improper Control of Generation of Code issue allows a low-privileged attacker to perform code injection, leading to arbitrary code execution within the context of the...

ALSA-2026:69924 Important: postgresql:12 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY...

PT-2026-104840

A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option can overflow the reply buffer with attacker-controlled content and length, resulting ...

PT-2026-96803

Name of the Vulnerable Software and Affected Versions SLC8000 versions prior to 9.7.0.2 SLC9000 versions prior to 9.7.0.2 EMG8500 versions prior to 9.7.0.1 EMG7500 versions prior to 9.7.0.1 SLB882 affected versions not specified SLCx-03 affected versions not specified SLCx-02 affected versions no...

PT-2026-96759

Name of the Vulnerable Software and Affected Versions SGLang affected versions not specified Description The multimodal generation runtime contains a flaw allowing unauthenticated arbitrary code execution. The issue occurs because the DiffusionServer within the disaggregated-diffusion orchestrato...

PT-2026-96896

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description An Improper Control of Generation of Code issue allows for code injection, which could result in arbitrary code execution within the context of the current user. This flaw can ...

CVE-2026-75682: Improper Neutralization of Special Elements used in an SQL Command

Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL...

CVE-2026-75686: Improper Input Validation

Adobe Connect is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim...

ROS-20260922-73-0030

The vulnerability in gstreamer1-plugins-good is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-96983

Name of the Vulnerable Software and Affected Versions Adobe Connect versions prior to 12.12 Description Adobe Connect contains an SQL Injection flaw, which occurs when special elements used in an SQL command are not properly neutralized. This allows a low-privileged attacker to execute arbitrary...

ALSA-2026:69923 Important: postgresql:15 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in...

CVE-2026-96269: Inclusion of Functionality from Untrusted Control Sphere

GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it...

PT-2026-97059

Name of the Vulnerable Software and Affected Versions GNU Emacs versions 28.1 through 31.1 Description Opening a file can lead to arbitrary code execution due to an issue where an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This issue occurs with the defau...

PT-2026-104832

GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it...

PT-2026-96907

Adobe Campaign Classic ACC is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require...