PT-2026-114443

Name of the Vulnerable Software and Affected Versions Wheels CLI versions prior to 4.1.1 Description The software fails to verify that the local development server responding to HTTP requests is associated with the current project. A malicious process listening on a targeted local port can...

CVE-2026-110909: Improper Restriction of Communication Channel to Intended Endpoints

Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project. A process listening on a port targeted by the CLI can receive the project's reload password and code submitted through wheels reload or wheels console; console al...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Console

Summary Multiple vulnerabilities were addressed in IBM Aspera Console version 3.4.12 Vulnerability Details CVEID:CVE-2026-54463 DESCRIPTION: websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, draft versions of the WebSocket protocol in websocket-driver include a...

CVE-2026-19810

Symantec Endpoint Detection and Response SEDR Console, prior to 4.13, may be susceptible to a Cross-Site Scripting XSS vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting i...

CVE-2026-19810 Cross-Site Scripting (XSS) in Symantec Endpoint Detection and Response Console

Symantec Endpoint Detection and Response SEDR Console, prior to 4.13, may be susceptible to a Cross-Site Scripting XSS vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting i...

CVE-2026-19810

The Symantec Endpoint Detection and Response (SEDR) Console , prior to version 4.13 , is vulnerable to a Cross-Site Scripting (XSS) vulnerability. This issue allows an attacker to inject malicious scripts that execute within the context of another user's session. Such exploitation could lead to u...

CVE-2026-70223

Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70157

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network...

CVE-2026-70157

A Heap-based buffer overflow vulnerability exists in the Windows System Information Console . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as CRITICAL with a CVSS score of 9.8, impacting confidentiality, integrity, and ...

CVE-2026-70223

A Use after free vulnerability exists in the Windows Console Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0 (High) , with impacts affecting confidentiality, integrity, and availability. Remediation is ava...

CVE-2026-110210 Phase Console through 2.77.3 Missing Authorization via secretHistory GraphQL Query

Phase Console through 2.77.3 contains a missing authorization vulnerability that allows organisation members without Secrets read permission to read secret history via the secretHistory GraphQL query. Attackers holding an environment key can supply a known secret identifier to retrieve encrypted...

Windows System Information Console Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network...

Windows Console Driver Elevation of Privilege Vulnerability

Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-52357

CVE-2025-52357 : Security Advisory: XSS in FD602GW-DX-R410 Router Admin Console Proof of Concept and Security Advisory for Reflected XSS vulnerability in the FD602GW-DX-R410 fiber router’s admin console firmware V2.2.14. Includes details, impact, and mitigation guidance. Overview A Cross-Site...

Microsoft Windows: CVE-2026-70157: Windows System Information Console Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network...

CVE-2026-70223: Use After Free

Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-19810: Improper Neutralization of Input During Web Page Generation

Symantec Endpoint Detection and Response SEDR Console, prior to 4.13, may be susceptible to a Cross-Site Scripting XSS vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting i...

CVE-2026-70157: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70223: Windows Console Driver Elevation of Privilege Vulnerability

Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally...

PT-2026-113371

Symantec Endpoint Detection and Response SEDR Console, prior to 4.13, may be susceptible to a Cross-Site Scripting XSS vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting i...