CVE-2026-19965 automad Password Reset Endpoint UserController.php requestPasswordResetToken response discrepancy

A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordResetToken of the file automad/src/server/Controllers/API/UserController.php of the component Password Reset Endpoint. This manipulation of the argument name-or-email causes...

PT-2026-76765

Name of the Vulnerable Software and Affected Versions TOTOLINK EX1200L version 9.3.5u.6146 B20201023 Description A remote attack can be launched against the /cgi-bin/cstecgi.cgi endpoint by manipulating the setWizardCfg function, leading to a null pointer dereference. A null pointer dereference...

PT-2026-73195

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub 44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptest macaddress. Such manipulation of the argument macaddress leads to command injection. The attack may be launched remotely. The exploi...

PT-2026-73185

A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ReadFaces 3DGS MDL7 in the library code/AssetLib/LWO/LWOLoader.h of the component 3DGS MDL7 Model Parser. Executing a manipulation can lead to heap-based buffer...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100753)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100753 advisory. In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskbcarve helpers pskbcarveinsideheader and...

Linux Distros Unpatched Vulnerability : CVE-2026-19968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ReadFaces3DGSMDL7 in the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099778)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099778 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftfib: fix stale stack leak via the OIFNAME register For NFTFIBRESULTOIFNAME the...

Apache Tomcat DoS

The vulnerability of FFM-based application server Apache Tomcat connections is related to deficiencies in error handling when checking host keys. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Apache Neethi PolicyReference Unauthorized Access

The vulnerability of the PolicyReference programming interface in the Apache Neethi Java framework is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

DHCP DoS

The vulnerability of DHCP servers for Windows operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Snapd Privilege Escalation

The vulnerability of the Snapd service in Ubuntu operating systems is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to increase their privileges...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the clk-rcg2.c component of the Linux kernel is related to pointer dereferencing errors. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100559)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100559 advisory. In the Linux kernel, the following vulnerability has been resolved: keys: Pin requestkeyauth payload in instantiate paths A: requestkey B: KEYCTLINSTANTIATEIOV...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099461)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099461 advisory. xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations. Tenable has extracted the preceding description block directly fr...

PT-2026-73299

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an attacker to execute arbitrary JavaScript in another user's browser via a crafted URL, due to improper...

PT-2026-73338

Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human...

PT-2026-76602

A vulnerability was determined in Wavlink WN531P3 and WN535M1 V250922. Affected by this vulnerability is the function strcpy of the file /etc/lighttpd/www/cgi-bin/export pingortrace.cgi of the component Export Pingortrace CGI. Executing a manipulation of the argument HTTP COOKIE can lead to...

PT-2026-73218

A security flaw has been discovered in Webkul Bagisto up to 2.4.4. This issue affects some unknown processing of the file /admin/sales/rma/requests of the component Backend Sales RMA Endpoint. Performing a manipulation results in authorization bypass. The attack is possible to be carried out...

PT-2026-73217

A vulnerability was identified in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/customers of the component Backend Customer Behavior Data Endpoint. Such manipulation of the argument ID leads to improper privilege management. The attack can be executed...

PT-2026-76596

A vulnerability was found in Kira-Pgr PromptShopMCP up to 5bc0cd17358e19a5415d11a531088170d7b81452. Affected is the function download image of the file server.py of the component Image-Toolkit-MCP-Server. Performing a manipulation of the argument image url results in server-side request forgery...