PT-2026-111109

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 Description A remote authenticated attacker can obtain sensitive information because session tokens are exposed within the HTML response. Recommendations At the moment, there is no...

CVE-2026-93892: Exposure of Sensitive Information to an Unauthorized Actor

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response...

PT-2026-110723

Name of the Vulnerable Software and Affected Versions Craft CMS versions 5.0.0 through 5.10.13 Description An authorization flaw exists in the actionSwitchToLicensedEdition function within the AppController. This issue allows any authenticated user to change the installed software edition...

CVE-2026-109175: Authorization Bypass Through User-Controlled Key

MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators to list other administrators' network-disk files via POST /networkDisk/getFileList. Attackers can query the endpoint, which filters only by status, file type, or filePath and...

CVE-2026-109200: Server-Side Request Forgery (SSRF)

LogicalDOC Community Edition through 9.3 contains a server-side request forgery vulnerability in the default-enabled XMLConverter that fetches xml-stylesheet href URLs without scheme or host allowlisting. Authenticated users can upload XML documents whose stylesheet href points to internal http,...

PT-2026-110487

Name of the Vulnerable Software and Affected Versions OTRS versions 6.x and earlier OTRS versions 7.0.x through 2026.6.x Description A path traversal issue in the SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory. This can...

CVE-2026-77364: Exposure of Sensitive Information to an Unauthorized Actor

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, undefined readPaths and writePaths settings allow all paths, strictReadDefault does not protect direct requests, and the .obsidian, .git, and .trash control directories are excluded only duri...

CVE-2026-78355: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory. This may allow files accessible to the OTRS application process to be deleted. The vulnerability does not bypass operating syste...

PT-2026-110863

Name of the Vulnerable Software and Affected Versions obsidian-tc versions prior to 1.3.1 Description Undefined readPaths and writePaths settings allow access to all paths, while strictReadDefault fails to protect direct requests. Additionally, the .obsidian, .git, and .trash control directories...

CVE-2026-9191: Origin Validation Error

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and XDBC evaluation paths from HTTP request, response, and session state. An attacker able to execute code through an affected path...

PT-2026-111101

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description A path traversal issue allows a remote authenticated attacker to cause a denial of service. Path traversal is a flaw that allows an attacker to access files and directories that a...

CVE-2026-82101: Improper Limitation of a Pathname to a Restricted Directory

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

CVE-2026-109629: Missing Authorization

Frappe ERPNext before 15.121.3 and 16.x before 16.35.0 contains a missing authorization vulnerability in an endpoint that sends transactional email through the site's configured outgoing account without checking the caller's authorization. Any authenticated user can supply arbitrary recipient lis...

CVE-2026-109638: Improper Neutralization of Special Elements used in an SQL Command

Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a SQL injection vulnerability in some endpoints caused by missing input validation. Authenticated attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from...

PT-2026-111067

Name of the Vulnerable Software and Affected Versions Frappe ERPNext versions prior to 15.119.0 Frappe ERPNext versions 16.x prior to 16.31.0 Description Authenticated attackers can trigger transactional emails for documents they are not permitted to read because certain endpoints fail to verify ...

CVE-2026-18166: Improper Access Control

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a remote authenticated attacker to obtain sensitive information due to improper authorization when using the CREATE WRAPPER command...

CVE-2026-109311: Improper Input Validation

vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open fallback with only a file-size check, exposing FFmpeg's IAMF parser heap overflow. Authenticated remote attackers can repeatedly upload malformed IAMF containers to /v1/audio/transcriptions, corrupting the heap and crashing the A...

PT-2026-110615

Name of the Vulnerable Software and Affected Versions Thelia version 2.6.0 Description Authenticated administrators can upload and install modules using the ZIP upload function. The system fails to validate or sandbox embedded PHP code, allowing an attacker to include malicious code within a...

PT-2026-110613

Name of the Vulnerable Software and Affected Versions Thelia version 2.6.0 Description Reflected Cross-Site Scripting XSS occurs because Smarty templates address.html and address-update.html do not properly escape double quotes in the next parameter. This allows an attacker to execute arbitrary...

PT-2026-110880

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.5 Description Improper authorization when using the CREATE WRAPPER command could allow a remote authenticated attacker to obtain sensitive information. This issue...