CVE-2026-102074

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

CVE-2026-102074

The FTP service in several APOGEE and TALON products is vulnerable to a stack-based buffer overflow (CWE-121) due to improper validation of user-controllable input length. Affected systems include APOGEE MBC (PPC) , APOGEE MEC (PPC) , APOGEE PXC Compact , APOGEE PXC Modular , TALON TC Compact , a...

CVE-2026-102073

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

CVE-2026-102073

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

EUVD-2026-98406

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

CVE-2026-102075: Stack-based Buffer Overflow

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

CVE-2026-102073: Integer Underflow (Wrap or Wraparound)

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

CVE-2026-102074: Stack-based Buffer Overflow

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

PT-2026-111368

Name of the Vulnerable Software and Affected Versions APOGEE MBC PPC BACnet affected versions not specified APOGEE MBC PPC P2 Ethernet affected versions not specified APOGEE MEC PPC BACnet affected versions not specified APOGEE MEC PPC P2 Ethernet affected versions not specified APOGEE PXC Compac...

CVE-2026-102076: Stack-based Buffer Overflow

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

PT-2026-111371

Name of the Vulnerable Software and Affected Versions APOGEE MBC PPC BACnet affected versions not specified APOGEE MBC PPC P2 Ethernet affected versions not specified APOGEE MEC PPC BACnet affected versions not specified APOGEE MEC PPC P2 Ethernet affected versions not specified APOGEE PXC Compac...

PT-2026-111369

Name of the Vulnerable Software and Affected Versions APOGEE MBC PPC BACnet affected versions not specified APOGEE MBC PPC P2 Ethernet affected versions not specified APOGEE MEC PPC BACnet affected versions not specified APOGEE MEC PPC P2 Ethernet affected versions not specified APOGEE PXC Compac...

PT-2026-111370

Name of the Vulnerable Software and Affected Versions APOGEE MBC PPC BACnet affected versions not specified APOGEE MBC PPC P2 Ethernet affected versions not specified APOGEE MEC PPC BACnet affected versions not specified APOGEE MEC PPC P2 Ethernet affected versions not specified APOGEE PXC Compac...

Malware in eslint-config-compact-base

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2026-103635

Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. compactthetasketch::deserialize and wrappedcompactthetasketch::wrap read header fields before checking that the input was long enough. For the compressed format, the size check could ...

CVE-2026-103635 Apache DataSketches: datasketches-cpp: Out-of-bounds read in compact Theta sketch deserialization allows denial of service via a crafted sketch

Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. compactthetasketch::deserialize and wrappedcompactthetasketch::wrap read header fields before checking that the input was long enough. For the compressed format, the size check could ...

CVE-2026-103635

The Apache DataSketches C++ library (repo: datasketches-cpp ) is vulnerable to an out-of-bounds read during the deserialization of compact Theta sketches . Specifically, the compact_theta_sketch::deserialize() and wrapped_compact_theta_sketch::wrap() functions read header fields without first ver...

PyJWT: Non-canonical signature segments enable raw-token revocation bypass

SummaryPyJWT 2.13.0 accepts compact JWS signature segments containing characters thatare not in the Base64URL alphabet. Appending !!!! to a valid signature doesnot change the decoded signature bytes or authenticated claims, but it changesthe serialized token and its SHA-256 hash. An application...

PYSEC-2026-4147 PyJWT: Non-canonical signature segments enable raw-token revocation bypass

Summary PyJWT 2.13.0 accepts compact JWS signature segments containing characters that are not in the Base64URL alphabet. Appending !!!! to a valid signature does not change the decoded signature bytes or authenticated claims, but it changes the serialized token and its SHA-256 hash. An applicati...

PT-2026-105893

Summary PyJWT 2.13.0 accepts compact JWS signature segments containing characters that are not in the Base64URL alphabet. Appending !!!! to a valid signature does not change the decoded signature bytes or authenticated claims, but it changes the serialized token and its SHA-256 hash. An applicati...