EUVD-2026-86251

LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 4.8.2 until 5.4.0, GET /api/v1.0/documents/search/ accepts sequential seven-digit document paths to scope descendant searches without requiring the caller to possess the public document UUID. An unauthenticated call...

CVE-2026-76907

The LaSuite Doc platform (versions 4.8.2 through 5.4.0) is vulnerable to public document enumeration via the GET /api/v1.0/documents/search/ endpoint. The root cause is that the API accepts sequential seven-digit document paths to scope searches without requiring the public document UUID. An unau...

CVE-2026-63203 Logto: Account API can disclose stored third-party provider tokens without the identities scope

Logto is the modern, open-source auth infrastructure for SaaS and AI apps. From 1.31.0 until 1.42.0, the Account API handlers in packages/core/src/routes/account/third-party-tokens.ts allow a caller holding a same-user access token with only the openid scope to retrieve stored social or enterpris...

CVE-2026-63203

In Logto versions 1.31.0 through 1.42.0 , a vulnerability exists in the Account API handlers located in packages/core/src/routes/account/third-party-tokens.ts. The root cause is that the handlers authenticate users but fail to require the identities scope , allowing callers with only an openid sc...

PT-2026-104900

In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in two places Add boundary checks in acpi ps get next namestring and acpi ps peek opcode to prevent out-of-bounds access...

PT-2026-104939

In the Linux kernel, the following vulnerability has been resolved: ACPI: bus: Introduce acpi bus get primary device The function used for obtaining the first "physical" device for which the given ACPI one is the ACPI companion, acpi get first physical node, may return a stale device pointer most...

PT-2026-104877

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add DIRECT MAP PHYSMEM END definition get free mem region and mhp get pluggable range bound their search to DIRECT MAP PHYSMEM END. LoongArch does not define it, so the fallback in include/linux/mm.h applies: under...

PT-2026-98041

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ASOC rockchip rockchip pdm component, the rockchip pdm set fmt function calls pm runtime get sync before accessing hardware registers but fails to check the return value. If the...

PT-2026-98221

Name of the Vulnerable Software and Affected Versions Dozzle versions prior to 10.6.7 Description In simple-auth deployments using per-user filters, the streamEvents function in internal/web/events.go fails to apply label filters to the container-stat and container-event channels returned by the...

PT-2026-98206

Name of the Vulnerable Software and Affected Versions volotat Anagnorisis versions prior to 0.4.3 Description A path traversal issue exists that can be triggered remotely. The flaw is located within the get file content, save file content, move files, and start streaming functions of the page.htm...

PT-2026-98225

Name of the Vulnerable Software and Affected Versions TREK versions prior to 3.3.0 Description The getSharedTripData function in server/src/services/shareService.ts allows the retrieval of sensitive trip information via the 'GET /api/shared/:token' endpoint, even when the trip owner has disabled...

PT-2026-98145

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.7.0 Description An authenticated user with file-management access can upload malicious XML and XSLT Extensible Stylesheet Language Transformations attachments. The API endpoint 'GET /api/v1/object type/id/files/fil...

CVE-2026-77320: Exposure of Sensitive Information to an Unauthorized Actor

TREK is a collaborative travel planner. Prior to 3.3.0, getSharedTripData in server/src/services/shareService.ts returns days, assignments, dayNotes, and places through GET /api/shared/:token even when the trip owner disables sharemap. The client hides the map, but the public JSON response still...

CVE-2026-62286: Exposure of Sensitive Information to an Unauthorized Actor

Dozzle is a realtime log viewer for docker containers. Prior to 10.6.7, streamEvents in internal/web/events.go applies a restricted user's label filter to container lists but not to the container-stat and container-event channels returned by GET /api/events/stream. In a simple-auth deployment usi...

CVE-2026-91161: Incorrect Authorization

OpenWA is a free, open source, self-hosted WhatsApp API gateway. Prior to 0.23.5, the GET /api/sessions/sessionId/groups/groupId/invite-code endpoint and the GroupGetInviteCode MCP tool have no OPERATOR role requirement, allowing a valid VIEWER key scoped to a session to retrieve an active group...

CVE-2026-76907: Exposure of Sensitive Information to an Unauthorized Actor

LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 4.8.2 until 5.4.0, GET /api/v1.0/documents/search/ accepts sequential seven-digit document paths to scope descendant searches without requiring the caller to possess the public document UUID. An unauthenticated call...

PT-2026-104913

In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate byte count in acpi ps get next package length Validate package length reading in acpi ps get next package length...

PT-2026-104983

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in get wave state The get wave state function for v9 trusts cp hqd cntl stack size and cp hqd cntl stack offset values read directly from the MQD, which are written by GPU microcode and fully...

PT-2026-105008

In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in acpi ps get next field Add boundary checks in acpi ps get next field to prevent out-of-bounds access...

PT-2026-98078

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists within the ACPICA component. This occurs due to missing boundary checks in the acpi ps get next namestring and acpi ps peek opcode functions...