PT-2026-96802

Name of the Vulnerable Software and Affected Versions SLC8000 versions prior to 9.7.0.2 SLC9000 versions prior to 9.7.0.2 EMG8500 versions prior to 9.7.0.1 EMG7500 versions prior to 9.7.0.1 SLB882 affected versions not specified SLCx-03 affected versions not specified SLCx-02 affected versions no...

CVE-2026-77243: Missing Authorization

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, ENABLEDTOOLS and TOOLSETS are applied when tools are listed but are not rechecked when a tools/call request is dispatched. A client that knows a hidden tool name can directly invoke...

PT-2026-96800

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers to execute arbitrary shell commands as root by exploiting an undocumented...

PT-2026-96924

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description An authorization bypass exists where the ENABLED TOOLS and TOOLSETS filters are only enforced during the tools/list request and are not re-verified when a tools/call request is dispatched. Thi...

CVE-2026-80146: Stack-based Buffer Overflow

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a stack-based buffer overflow vulnerability that allows authenticated attackers to potentially execute arbitrary code by exploiting an...

CVE-2026-77519

MaxKB (an open-source enterprise AI assistant) versions 2.10.2-lts and earlier contain an authentication inconsistency in the /chat/api/mcp endpoint. The MCP authentication path validates ApplicationApiKey using only the secret and active status, omitting the is_permanent and expire_time checks e...

CVE-2026-77519 MaxKB: Expired application API keys remain usable on `/chat/api/mcp`

MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, the /chat/api/mcp authentication path looks up an ApplicationApiKey using only its secret and active status, without enforcing the ispermanent and expiretime checks used by the standard chat API. A previously valid,...

CVE-2026-90558

A flaw was found in sngrep. This vulnerability involves stack buffer overflows in the Session Initiation Protocol SIP attribute formatting routines. A remote attacker can exploit this by crafting malicious SIP packets with oversized header values, such as Call-ID or X-Call-ID, which exceed the...

PT-2026-96076

Name of the Vulnerable Software and Affected Versions github.com/temporalio/tchannel-go affected versions not specified Description The software fails to reject TChannel call fragments that contain checksum metadata but lack length-prefixed argument chunks. In this scenario, the fragment reader...

PT-2026-96075

Name of the Vulnerable Software and Affected Versions github.com/temporalio/tchannel-go affected versions not specified Description The software fails to validate the one-byte checksum-type field in inbound TChannel call frames. A remote network peer can complete the standard initialization...

CVE-2026-79919: Protection Mechanism Failure

MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, function-library code running under the LDPRELOAD sandbox can invoke ctypes.CDLL from an importlib.abc.MetaPathFinder callback so the dlopen call-stack heuristic sees a Python import frame, then use unhooked dlsym...

CVE-2026-88856

OrdaSoft Joomla Gallery extension for Joomla versions

Uncontrolled Recursion

Overview braces is a Bash-like brace expansion, implemented in JavaScript. Affected versions of this package are vulnerable to Uncontrolled Recursion in the recursive AST walkers, which lack depth guards. An attacker can supply deeply nested brace patterns that stay within the character limit to...

BIT-KYVERNO-2025-15613 Kyverno before v1.13.4 SSRF via Service Call

Kyverno before v1.13.4 is vulnerable to server-side request forgery SSRF via its Service Call functionality. An attacker with permission to create Kyverno ClusterPolicies can specify an external URL in a policy's apiCall/service configuration; although Service Call is documented for in-cluster...

PT-2026-95451

Name of the Vulnerable Software and Affected Versions OpenImageIO versions prior to 3.0.20.0 OpenImageIO versions prior to 3.1.15.0 OpenImageIO versions prior to 3.2.0.3-beta1 Description A crafted FITS stream containing consecutive 2880-byte header blocks without the mandatory END keyword causes...

Security Bulletin: IBM On Call Manager Mobile Application is affected by a vulnerability in regular expression processing

Summary A vulnerability in the xmldom library affects regular expression processiong for the IBM On Call Manager Android and iOS mobile applications. Vulnerability Details CVEID:CVE-2026-34601 DESCRIPTION: xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and...

CVE-2026-12284

Mattermost Desktop App versions =6.2 6.2.2.0 fails to validate the IPC sender in the leaveCall handler which allows a malicious or compromised Mattermost server or a user with script access to a connected server view to disconnect an active call belonging to a different connected server via the...

CVE-2026-93164

CVE-2026-93164 affects the Linux kernel uprobes/x86 subsystem. The root cause is that optimized uprobes installed on a 5-byte NOP could clobber the x86 redzone area : the call instruction used to jump to the uprobe trampoline stores the return address on the stack, potentially overwriting tempora...

Arbitrary Code Injection

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Arbitrary Code Injection in the handling of rejected host Promises via call or apply indirection. An attacker can execute arbitrary commands with the...

CVE-2026-92933

A flaw was found in vm2. The NodeVM component exposes the host util module, including the util.getCallSites function, to the sandbox as an unfiltered copy. On Node.js versions 22.9 and later, this allows sandboxed code to access util.getCallSites, which can return the host process's full call...