CVE-2026-69358: Use of Uninitialized Resource

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...

PT-2026-88316

Name of the Vulnerable Software and Affected Versions ConnectWise ScreenConnect versions prior to 26.6.5 Description A flaw in the ScreenConnect client allows files to be transferred and executed through an active remote session without authorization or host confirmation under certain...

CVE-2026-68828: Heap-based Buffer Overflow

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

PT-2026-87853

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description A use after free condition in the Windows SMB Client allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Use after free is a memo...

CVE-2026-72936: Use After Free

Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network...

CVE-2026-78627: Insertion of Sensitive Information into Log File

The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property. The credential is recorded in plaintext in the installer log, the Application Event Log, and the process command line, all of which are readable by an authenticated local user on the...

CVE-2026-69485: Use of Uninitialized Resource

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...

CVE-2026-77896: Integer Overflow or Wraparound

Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network...

CVE-2026-73014: Missing Authorization

Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally...

CVE-2026-76967: Deserialization of Untrusted Data

SAP NetWeaver Business Client does not perform sufficient validation when processing certain locally stored data during application startup. An attacker with low privileges on the local system could replace this data with specially crafted content. When the application is next launched, the craft...

PT-2026-87715

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...

PT-2026-87462

Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network...

CVE-2026-84197: Improper Certificate Validation

In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto/ditto-javascript-client-node1.0 from 1.0.0 to 2.1.0, the WebSocket transport hard-codes rejectUnauthorized: false wh...

PT-2026-87070

A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privileges can define a dashboard containing a malicious payload, or a victim can be socially engineered into importing a...

PT-2026-87197

Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network...

PT-2026-88004

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description Improper control of code generation leads to a code injection flaw, allowing an unauthorized attacker to execute arbitrary code over a network. Recommendations At the moment,...

PT-2026-88143

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-34223: Improper Control of Generation of Code

A vulnerability has been identified in Desigo CC ClickOnce Client V6 All versions, Desigo CC ClickOnce Client V7 All versions, Desigo CC family V8 All versions, Desigo CC family V9 All versions, Desigo CC Flex Client V6 All versions, Desigo CC Flex Client V7 All versions, Desigo CC Installed Clie...

PT-2026-86959

SAP NetWeaver Business Client does not perform sufficient validation when processing certain locally stored data during application startup. An attacker with low privileges on the local system could replace this data with specially crafted content. When the application is next launched, the craft...

PT-2026-88442

The Okta Privileged Access client URL handler does not insert an option terminator before appending the target value to the command-line arguments. When a scaleft:// protocol handler link contains a value beginning with a hyphen, the underlying CLI framework interprets it as a command-line flag,...