ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

A flaw was found in the ip-address library. This library incorrectly interprets IPv4 address octets with leading zeros as decimal, while standard network parsers interpret them as octal. This inconsistency can cause applications to misclassify network targets, allowing a remote attacker to bypass...

CVE-2026-69404: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

PT-2026-87724

Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-87697

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description A use-after-free condition in Windows TCP/IP allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory corruption issue that occurs when an...

PT-2026-87190

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Server-Side Request Forgery SSRF vulnerability in the file upload functionality system/core/uploader.php at lines 509-532. When the "upload from URL" feature follows an HTTP redirect, the redirected...

F5 Networks BIG-IP : BIND vulnerability (K000163233)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000163233 advisory. If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may...

F5 Networks BIG-IP : BIND vulnerability (K000163234)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000163234 advisory. An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enou...

PT-2026-87423

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

PT-2026-87892

Name of the Vulnerable Software and Affected Versions IP Helper affected versions not specified Description A use after free issue in IP Helper allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use after free is a memory corruption flaw that...

PT-2026-87701

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description A use-after-free condition in Windows TCP/IP enables an authorized attacker to elevate privileges over a network. Use-after-free is a memory corruption issue that occurs when an...

CVE-2026-69761: Use After Free

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...

CVE-2026-69793: Improper Validation of Consistency within Input

Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-87591

Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network...

CVE-2026-69385: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

CVE-2026-72981: Use After Free

Use after free in IP Helper allows an unauthorized attacker to execute code over a network...

CVE-2026-69757: Use After Free

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...

PT-2026-87439

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description A race condition occurs in Windows TCP/IP due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally. A race conditi...

CVE-2026-69588: Missing Release of Memory after Effective Lifetime

Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network...

CVE-2026-86287

Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...

CVE-2026-86287 Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths

Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...