PT-2026-70512

Name of the Vulnerable Software and Affected Versions Windows Kerberos affected versions not specified Description A heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...

PT-2026-70197

Craft CMS 5.0.0-RC1 before 5.10.6 and 4.0.0-RC1 before 4.18.2 contain an arbitrary file read vulnerability. The create Twig function restricts class instantiation using a 5-entry blocklist that does not include SplFileObject, allowing an authenticated administrator with allowAdminChanges=true to...

PT-2026-70758

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute code over a network. Deserialization is the process of converting a data stream back into an...

PT-2026-70645

Name of the Vulnerable Software and Affected Versions Microsoft Office Access affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

mcp-server-kubernetes 3.8.x Argument Injection

An argument injection vulnerability in mcp-server-kubernetes versions 3.8.x via the resourceType/name parameters in kubectlget, kubectldescribe, and kubectldelete tools allows --server flag injection and bearer token exfiltration. !/usr/bin/env python3 Exploit Title: mcp-server-kubernetes 3.8.x -...

Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service (cisco-sa-iosxe-bing-MGHrFAkd)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. - A denial of service DoS vulnerability exists in the Blocks Extensible Exchange Protocol BEEP feature of Cisco IOS XE Software due to improper handling of BEEP SOAP requests. An unauthenticated, remote...

Linux Distros Unpatched Vulnerability : CVE-2026-73142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-5xr9-fmm8-7p8x: remotetrx NetUplink: connection object leak DoS CVE-2026-73142 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-73154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-5g48-xjmf-7p4q: StationData::setData stack overflow CVE-2026-73154 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2026-73147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-pc2g-2p95-4cr5: TCL command injection in reflector client CVE-2026-73147 Note that Nessus relies on the presen...

Linux Distros Unpatched Vulnerability : CVE-2026-73141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-xmcv-mjpv-x46q: Audio decoders: stack VLA exhaustion CVE-2026-73141 Note that Nessus relies on the presence of...

The vulnerability of the sctp_process_asconf_param() function in the net/sctp/sm_make_chunk.c module of Linux kernel allows a hacker to elevate their privileges to the root level.

The vulnerability of the sctpprocessasconfparam function in the net/sctp/smmakechunk.c module of the Linux kernel is related to the pointer being dereferenced after its expiration time. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to the root level...

PT-2026-70305

Out-of-bounds read for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local...

PT-2026-70465

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A heap-based buffer overflow occurs in Windows NTFS, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that...

PT-2026-70141

Name of the Vulnerable Software and Affected Versions Friendica versions prior to 2026.08-dev Description An authenticated user with a self-registered account can perform a server-side request forgery SSRF through the link-preview endpoint. This occurs because the endpoint fetches user-supplied...

PT-2026-70485

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Bind Filter Driver. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based...

PT-2026-70703

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description Improper access control in the Windows Cross Device Service allows an authorized attacker to elevate privileges locally. The issue occurs because a standard user can create the...

PT-2026-70982

Name of the Vulnerable Software and Affected Versions Parallels RAS Client affected versions not specified Description A local privilege escalation issue exists in the RAS RDP Backend Service due to an exposed dangerous function. An attacker who has already obtained the ability to execute...

PT-2026-70708

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to locally disclose sensitive information, which can affect the system. Recommendations At the moment, there is no information...

PT-2026-70731

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

PT-2026-70583

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description A use-after-free condition in the Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occur...