PT-2026-88213

Name of the Vulnerable Software and Affected Versions NfcService.java affected versions not specified Description Multiple functions within NfcService.java lack necessary permission checks, which may enable silent payment session hijacking. This flaw allows for local escalation of privilege witho...

PT-2026-87031

The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Stripe OAuth return endpoint in all versions up to, and including, 5.27.4. This makes it possible for unauthenticated attackers to overwrite the site...

PT-2026-88208

In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88458

Name of the Vulnerable Software and Affected Versions Waves Central for macOS versions prior to 17.0 Description A local privilege escalation exists in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing certificate chain for equality...

EulerOS 2.0 SP12 : samba (EulerOS-SA-2026-3385)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the 'chec...

EulerOS 2.0 SP12 : perl (EulerOS-SA-2026-3364)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, packipmreqsource checks the length of its source argument befor...

EulerOS 2.0 SP12 : perl (EulerOS-SA-2026-3289)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, packipmreqsource checks the length of its source argument befor...

EulerOS 2.0 SP12 : samba (EulerOS-SA-2026-3310)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the 'chec...

CVE-2026-86500

In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant themselves Project Admin...

CVE-2026-86505

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace...

CVE-2026-86505

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace...

EUVD-2026-72521

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace...

CVE-2026-86505

JetBrains IntelliJ IDEA prior to 2026.2.2 contains a missing project-trust check that allowed project metadata to be leaked to the JetBrains Marketplace . The vulnerability requires a local attack vector with user interaction, resulting in a low confidentiality impact (CVSS 3.1 score: 3.3 LOW ). ...

CVE-2026-86500

In JetBrains YouTrack versions prior to 2026.1.14047 , a missing escalation check allowed a user with project update permissions to grant themselves Project Admin rights, effectively elevating their access beyond the intended permission level. The underlying cause is the absence of a proper check...

CVE-2026-86500

In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant themselves Project Admin...

CVE-2026-86500

In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant themselves Project Admin...

EUVD-2026-72514

In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked entities without update permission...

EUVD-2026-72516

In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant themselves Project Admin...

CVE-2026-18453

A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of opsharedsearch allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USEONEBACKEND control, resulting in denial of servic...

DEBIAN-CVE-2026-18453

A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of opsharedsearch allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USEONEBACKEND control, resulting in denial of servic...