PT-2026-92283

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the do sss aes gcm 256 op function within the crypto-aes.c file allows for a possible out-of-bounds read. This issue could result in...

PT-2026-92299

Name of the Vulnerable Software and Affected Versions IP Multimedia Subsystem affected versions not specified Description An incorrect bounds check in the IP Multimedia Subsystem allows for an out-of-bounds write. This condition can be exploited to achieve remote code execution without requiring...

PT-2026-92416

Name of the Vulnerable Software and Affected Versions Concrete CMS versions prior to 9.5.3 Description An issue exists in the dashboard sitemap reorder action ConcreteControllerBackendDashboardSitemapUpdate where the system only verifies the global access sitemap task permission and fails to chec...

PT-2026-93112

Name of the Vulnerable Software and Affected Versions Concrete CMS versions 9.0.0 through 9.5.2 Description An issue exists where block-level edit-permission checks are not enforced on the Express Form block's control-management actions. The system relies exclusively on CSRF Cross-Site Request...

PT-2026-92332

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the get global config item addr function within the gc.c file allows for a possible out-of-bounds read. This condition can be leveraged...

PT-2026-92334

Name of the Vulnerable Software and Affected Versions VPU affected versions not specified Description A missing permission check in VPU allows for a permission bypass. This issue can lead to local escalation of privilege, granting the attacker System execution privileges without requiring user...

PT-2026-92040

Name of the Vulnerable Software and Affected Versions Dell SmartFabric OS10 Software versions prior to 10.6.1.3 Description An issue exists where the software allows the download of code without an integrity check. A high privileged attacker with remote access could exploit this to achieve code...

CVE-2026-57035: Out-of-bounds Write

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92323

In gf algo get cached dump data of gf algo.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92328

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An incorrect bounds check in multiple locations allows for a possible out-of-bounds write, which is a condition where data is written outside the intended memory...

PT-2026-93174

CVE-2026-68491 An insufficient check allowed for the overwrite of arbitrary files via a symlink. https://t.co/CZ9pLnixMr...

PT-2026-92394

In Concrete CMS before 9.5.3, the SEO Bulk Update Meta Tags editor did not check per-page edit permissions before saving. The saveRecord action validated the per-page CSRF token but never called canEditPageProperties for the target page, so a user who was granted access to the bulk SEO tool and...

PT-2026-92320

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description An out-of-bounds write can occur in the ReadTileInfo function within vp9hwd headers.cc due to a missing bounds check. This flaw allows for remote escalation of privilege without...

PT-2026-92327

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A permission bypass exists in multiple locations due to a missing permission check. This flaw allows for local escalation of privilege without requiring...

PT-2026-92288

Name of the Vulnerable Software and Affected Versions Bootloader affected versions not specified Description A missing permission check in the Bootloader allows for a local escalation of privilege. This issue enables an attacker to obtain System execution privileges without requiring any user...

PT-2026-92284

Name of the Vulnerable Software and Affected Versions Bootloader affected versions not specified Description A permission bypass exists in the Bootloader due to a missing permission check. This flaw allows for local escalation of privilege, granting System execution privileges without requiring...

PT-2026-92280

Name of the Vulnerable Software and Affected Versions Cellular Modem affected versions not specified Description An out-of-bounds write occurs due to a missing bounds check. This flaw allows remote code execution without requiring additional execution privileges or user interaction. Recommendatio...

CVE-2026-0159: Out-of-bounds Write

In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92281

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the Vp9DecodeFrameTag function within vp9hwd headers.cc allows for a possible out-of-bounds write. This condition could enable remote...

PT-2026-91867

Name of the Vulnerable Software and Affected Versions WP Directory Kit WordPress plugin versions prior to 1.5.8 Description The plugin fails to verify the status or ownership of a listing before returning its content via a public AJAX action. This allows unauthenticated attackers to access and re...