PT-2026-108279

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

Langflow AI Code Validation Authenticated Remote Code Execution

Langflow versions 1.0.0 through 1.10.0 are susceptible to authenticated remote code execution due to improper validation of code in the /api/v1/validate/code endpoint. Arbitrary code is executed under the context of the backend Langflow process. This module requires Metasploit:...

EulerOS 2.0 SP15 : proftpd (EulerOS-SA-2026-3941)

According to the versions of the proftpd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ProFTPD modsftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The fxppacketread function accepts the...

PT-2026-107842

A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocade SANnav Virtual Machine VM. This can happen when the SANnav server encounters an Out Of Memory OOM condition. The...

CVE-2026-85488: Use of Hard-coded Credentials

Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read access to the installation path can discover this credential and perform privilege escalation on affected Open Virtual Appliance OVA...

PT-2026-107724

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 10.0.1 Description An issue exists when processing trunk configuration operations where the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary...

PT-2026-107726

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 10.0.1 Description An access control bypass exists in the Role-Based Access Control RBAC validation engine. During the processing of specific management protocol operations, the RBAC engine incorrectly...

PT-2026-107825

In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters...

PT-2026-107846

Name of the Vulnerable Software and Affected Versions The Wallet System for WooCommerce versions prior to 2.8.0 Description The plugin fails to perform necessary capability checks and relies on a token that any authenticated user can obtain from a front-end page. This flaw allows an authenticated...

PT-2026-108016

Name of the Vulnerable Software and Affected Versions IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22 IBM DataPower Gateway versions 10.6.0.0 through 10.6.0.10 IBM DataPower Gateway versions 10.6.1 through 10.6.6 IBM DataPower Gateway versions 11.0.0.0 through 11.0.0.2 Description A...

PT-2026-107955

Name of the Vulnerable Software and Affected Versions GlavSoft TightVNC Server for Windows versions prior to 2.8.88 Description An integer underflow occurs in the trimTransparent function within WinCursorShapeUtils when a cursor shape with a width or height of zero is processed on the DXGI captur...

PT-2026-107953

Name of the Vulnerable Software and Affected Versions GlavSoft TightVNC Server for Windows versions prior to 2.8.88 Description Incorrect permission assignment allows a local authenticated user to read or overwrite the inter-process communication IPC handles used between the TightVNC service and...

CVE-2026-19878: Improper Enforcement of Behavioral Workflow

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass additional authentication workflow steps...

CVE-2026-107706: Incorrect Authorization

Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read permission before writing extrafield values. Authenticated users with read-only access can POST objectType, objectId, field and value parameters to...

CVE-2026-15781: Stack-based Buffer Overflow

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-85486: Improper Neutralization of Directives in Dynamically Evaluated Code

Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately be processed. A malicious actor with basic access can supply crafted input to execute arbitrary code...

CVE-2026-94246: Authorization Bypass Through User-Controlled Key

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the wallet account named in a withdrawal submission belongs to the user making it, allowing any authenticated user, such as a subscriber, to file a withdrawal request against another user's wallet for an amount a...

PT-2026-108102

Name of the Vulnerable Software and Affected Versions Malcolm affected versions not specified Description An inconsistency in URL path normalization exists between the Lua-based role-based access control RBAC authorization layer and the nginx request routing logic in the reverse proxy. An...

PT-2026-108028

Uncontrolled eviction in the browser session table of the REST API in Progressive Robot hMailServer 6.2.28 through 6.3.5 allows a remote authenticated user to end other users' sessions. The table of browser sessions, shared by every account, the server administrator and support sessions, dropped...

PT-2026-108192

Name of the Vulnerable Software and Affected Versions Indico versions prior to 3.3.13 Description An authenticated user can misuse the legacy session export API to retrieve details for a restricted session without having the required access, provided the containing event is accessible. This missi...