PT-2026-94154

Name of the Vulnerable Software and Affected Versions NitroSense affected versions not specified PredatorSense affected versions not specified Description The Acer Agent Service component fails to properly require authentication during the socket handshake process. This flaw allows an unauthorize...

PT-2026-94391

Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions prior to 9.18 Description The Backup tool in pgAdmin 4 fails to validate the database field within the /backup/job//object endpoint. This field is appended as a positional argument to the pg dump utility. Since pg dump uses...

PT-2026-105026

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.frame max value during amqp login, and rabbitmq-c accepts the value in amqp login inner in librabbitmq/amqp socket.c. amqp tune connection in librabbitmq/am...

PT-2026-94394

Name of the Vulnerable Software and Affected Versions AsyncHttpClient versions 3.0.8 through 3.0.11 Description A connection permit leak occurs when TLS connection establishment fails before the handshake completes. This happens because the NettyConnectListener removes the partitionKeyLock permit...

PT-2026-94365

Name of the Vulnerable Software and Affected Versions Mattermost Desktop App versions prior to 6.2.2.0 Description The application fails to validate the URL scheme when verifying if a target URL is internal to the connected server. This allows a network-positioned attacker to load a plugin popout...

PT-2026-95074

Name of the Vulnerable Software and Affected Versions AWS IoT Device SDK for Python versions 1.5.3 through 1.6.0 Description Improper validation of certificates with host mismatch occurs in the MQTT client TLS connection layer, specifically affecting X.509 mutual authentication on port 8883 and...

CVE-2026-92943: Improper Validation of Certificate with Host Mismatch

Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3.7 and later might allow an adversary-in-the-middle actor to impersonate the AWS IoT Core endpoint, read device telemetry, and inject...

PT-2026-95080

Name of the Vulnerable Software and Affected Versions MongoDB Entity Framework Core Provider affected versions not specified Description Applications using the MongoDB Entity Framework Core Provider may inadvertently disable field level encryption if a database name is included within the...

PT-2026-98959

Name of the Vulnerable Software and Affected Versions NetworkManager-sstp affected versions not specified Description A flaw in the SSTP VPN plugin for NetworkManager allows a local unprivileged user to execute arbitrary commands with root privileges. The issue occurs when shell...

PT-2026-94502

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where the ksmbd all conn set status function incorrectly treats every connection with a set transient binding flag as belonging to the target SessionI...

CVE-2026-92757: Missing Encryption of Sensitive Data

Applications built on MongoDB Entity Framework Core Provider which place a database name in the connection string may inadvertently disable field level encryption...

EUVD-2026-81064

Nango through 0.70.4 fails to validate caller-supplied connection configuration values interpolated into provider token and proxy URL templates. Authenticated attackers can supply malicious configuration values to direct server requests at internal addresses or cloud metadata endpoints, potential...

CVE-2026-92804

Nango versions through 0.70.4 are affected by a Server-Side Request Forgery (SSRF) vulnerability caused by the failure to validate caller-supplied connection configuration values that are interpolated into provider token and proxy URL templates. An authenticated attacker can supply malicious conf...

GO-2026-6466 Traefik HTTP/3 Backend NTLM Connection Reuse in github.com/traefik/traefik

Traefik HTTP/3 Backend NTLM Connection Reuse in github.com/traefik/traefik...

github.com/rabbitmq/amqp091-go: RabbitMQ amqp091-go: Denial of Service due to synchronous event channel blocking

A flaw was found in RabbitMQ amqp091-go, a Go AMQP 0.9.1 client. When the client synchronously sends events to application-provided channels, an unbuffered or full listener channel can cause the client's reader to block. This blockage prevents the processing of critical messages and heartbeats,...

DEBIAN-CVE-2026-77411

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readLongstr in read.go returns an empty string and a nil error when a declared AMQP longstr length exceeds 0x7FFFFFFF instead of returning ErrSyntax. The function leaves the declared field bytes unread, while readTable treats the...

CVE-2026-77409

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.dispatch in channel.go, confirms.confirm in confirms.go, and Connection.dispatch0 in connection.go synchronously send publisher confirmations, flow-control events, consumer cancellations, returned messages, including...

CVE-2026-77409 RabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel Blocking

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.dispatch in channel.go, confirms.confirm in confirms.go, and Connection.dispatch0 in connection.go synchronously send publisher confirmations, flow-control events, consumer cancellations, returned messages, including...

CVE-2026-77409

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.dispatch in channel.go, confirms.confirm in confirms.go, and Connection.dispatch0 in connection.go synchronously send publisher confirmations, flow-control events, consumer cancellations, returned messages, including...

CVE-2026-77411

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readLongstr in read.go returns an empty string and a nil error when a declared AMQP longstr length exceeds 0x7FFFFFFF instead of returning ErrSyntax. The function leaves the declared field bytes unread, while readTable treats the...