PT-2026-91974

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Firefox ESR versions prior to 153.3 Thunderbird versions prior to 156 Thunderbird versions prior to 153.3 Description A mitigation bypass exists within the Remote Settings Client component. Recommendations Update...

PT-2026-93182

Name of the Vulnerable Software and Affected Versions Wärtsilä FOS-Onboard affected versions not specified Description A hardcoded cryptographic client authentication key exists within the robot testing framework component. This issue allows for the potential bypass of authentication mechanisms d...

PT-2026-92534

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2026-69214: Session Fixation

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The CookieJar client middleware stores a response cookie’s Domain attribute without checking that it domain-matches the host that supplied the cookie or rejecting public suffixes. A malicious or compromised server...

CVE-2026-88742

Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...

PT-2026-92799

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM MCAD Connector version 3.6 Description A flaw in the CAX Client component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. This issue can lead to...

CVE-2026-83277: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain component: CAX Client. The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes...

CVE-2026-83274: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain component: CAX Client. The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes...

ROS-20260915-73-0201

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to compromise data integrity...

PT-2026-92067

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description An out-of-bounds write issue exists in server-side static virtual channel handling when CHANNEL OPTION SHOW PROTOCOL is enabled. Authenticated clients can queue oversized channel messages, leading t...

PT-2026-92075

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description An out-of-bounds read occurs in the func get ep desc function within the URBDRC channel. The issue arises because interface arrays are indexed by position rather than by the protocol field...

CVE-2026-83279: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain component: CAX Client. The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes...

PT-2026-91955

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Firefox ESR versions prior to 115.41 Firefox ESR versions prior to 140.16 Firefox ESR versions prior to 153.3 Thunderbird versions prior to 156 Thunderbird versions prior to 140.16 Thunderbird versions prior to...

CVE-2026-83339: Improper Authentication

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-88742: Improper Neutralization of Input During Web Page Generation

Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...

PT-2026-92797

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM MCAD Connector version 3.6 Description An issue exists in the CAX Client component of the Oracle Agile PLM MCAD Connector. A low privileged attacker with access to the infrastructure where the software executes can compromise...

CVE-2026-92038: Protection Mechanism Failure

Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

yast2-samba-client-5.0.5-1.1 on GA media (moderate)

yast2-samba-client-5.0.5-1.1 on GA media Announcement ID: openSUSE-SU-2026:11762-1 Rating: moderate Cross-References: CVE-2026-25706 CVSS scores: CVE-2026-25706 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability c...

PT-2026-92470

Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...

CVE-2026-84543

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory...