CVE-2026-82003: Improper Input Validation

Adobe Campaign Classic ACC is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the...

PT-2026-96894

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Improper Control of Generation of Code issue allows for code injection, which could lead to arbitrary code execution within the context of the current user. This flaw ca...

CVE-2026-73369: Improper Control of Generation of Code

Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

CVE-2026-75721: Improper Control of Generation of Code

Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

PT-2026-96739

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Speech affected versions not specified Description Malicious input created by an attacker could cause a code injection. This issue may lead to arbitrary code execution, information disclosure, and data tampering. Recommendations At...

PT-2026-96898

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Incorrect Authorization issue allows an attacker to execute arbitrary code in the context of the current user. This flaw does not require user interaction to be exploite...

PT-2026-96774

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 6.2.0 Description The CPython bytecode .pyc marshal parser in radare2 contains a flaw where marshal readers accept a 32-bit string length without validating if the value overflows the size-plus-one allocation. When...

PT-2026-97010

Name of the Vulnerable Software and Affected Versions Substance3D - Modeler affected versions not specified Description An out-of-bounds write occurs when a program writes data past the end of a designated memory buffer. This issue could allow arbitrary code execution in the context of the curren...

PT-2026-97068

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description An issue exists where a remote authenticated attacker can execute arbitrary code. This occurs due to improper neutralization of special elements used in an OS command, a flaw that...

PT-2026-97004

Name of the Vulnerable Software and Affected Versions Substance3D - Modeler affected versions not specified Description An out-of-bounds write occurs when a program writes data past the end of a designated memory buffer. This issue could allow arbitrary code execution in the context of the curren...

CVE-2026-75663: Out-of-bounds Write

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-83962: Stack-based Buffer Overflow

Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-95508: Out-of-bounds Write

A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option can overflow the reply buffer with attacker-controlled content and length, resulting ...

CVE-2026-75649: Heap-based Buffer Overflow

Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75655: Uncontrolled Recursion

Bridge is affected by an Uncontrolled Recursion vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a...

PT-2026-97043

Name of the Vulnerable Software and Affected Versions lwIP versions 2.0.1 through 2.2.1 Description A double free vulnerability exists in the lwIP API, which occurs when the system attempts to free the same memory location twice. This flaw can lead to system crashes, denial of service, memory...

PT-2026-96686

Name of the Vulnerable Software and Affected Versions libslirp affected versions not specified Description A heap-based buffer overflow exists in the DHCPv6 and TFTP response builders. This occurs when the host is configured with a small interface MTU Maximum Transmission Unit, which is the maxim...

CVE-2026-75665: Heap-based Buffer Overflow

Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

ALSA-2026:69923 Important: postgresql:15 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in...

ALSA-2026:69924 Important: postgresql:12 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY...