PT-2026-114031

Name of the Vulnerable Software and Affected Versions S3 .NET Encryption Client versions prior to 3.2.2 S3 .NET Encryption Client versions prior to 4.0.3 Description A padding oracle flaw exists in the S3 .NET Encryption Client. A remote user with read access to encrypted objects in an S3 bucket...

PT-2026-114277

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description A flaw allows a token with write:user scope to register an attacker-controlled SSH public key on the account of the token owner. API requests signed with the corresponding private key...

PT-2026-114422

Name of the Vulnerable Software and Affected Versions curl versions prior to 8.23.0-1.1 Description When built with wolfSSL, curl may incorrectly validate a pinned public key hash against a key that the TLS peer does not possess. This occurs during the TLS handshake when wolfSSL validates the...

CVE-2026-110457: Improper Limitation of a Pathname to a Restricted Directory

A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain information about files on the device...

PT-2026-113644

A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device...

Bilinear Compressive Security with Finitely Many Samples

Bilinear Compressive Security BCS is a lightweight encryption scheme that combines compressed sensing with a fresh random convolution filter to improve resistance against key-recovery attacks under key reuse. Previous work derived information-theoretic guarantees for BCS by relating key...

Quantum-Aware Key Rank for Side-Channel Attacks Evaluation

Side-channel attacks on block ciphers rarely recover the key outright: they leave a residual key space ordered by subkey posteriors, and evaluation laboratories report the key rank of the true key against thresholds near 2^48 and 2^60. No evaluation framework models an adversary who collects trac...

PT-2026-113777

Name of the Vulnerable Software and Affected Versions SeaweedFS versions 4.0.388 through 4.40 Description The SFTP Helm chart contains an unencrypted Ed25519 private host key within the k8s/charts/seaweedfs/templates/sftp/sftp-secret.yaml file as stringData.seaweedfs sftp ssh private key. In...

CVE-2026-110454: Improper Access Control

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device...

PT-2026-113643

A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device...

PT-2026-114421

Name of the Vulnerable Software and Affected Versions libcurl versions prior to 8.23.0-1.1 Description When libcurl utilizes libssh2 with a hashed known hosts file, an unrelated initial entry can lead to incorrect host key validation. Specifically, the system may report a key mismatch as a missin...

PT-2026-113735

HPE NonStop Middleware software has secret key handling and data deserialization vulnerability...

CVE-2026-110456: Improper Access Control

A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device...

CVE-2026-110458: Improper Limitation of a Pathname to a Restricted Directory

A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or truncate files on the device...

CVE-2026-108336: Use of Hard-coded Cryptographic Key

When the default self-signed certificate is used, an attacker could gain administrative access to the application. The SSL certificate for the web interface is used to sign JWT access tokens that are used to validate that the user is logged in. When the default SSL certificate is used, an attacke...

Important: systemd

Issue Overview: Amazon Linux–vended DNS resolvers shipped with an older DNSSEC root signing key. For hosts configured with DNSSEC validation enabled, this could result in DNS resolution failures, including for names in unsigned zones. This applies where the resolver is still using the trust ancho...

CVE-2026-42093: Improper Neutralization of Special Elements used in an SQL Command

Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/queryrunner/queryresults.py accepts paramqueryNkey=value parameters and passed attacker-controlled values to replacequeryparameters for raw substitution into a...

CVE-2026-102986: Authorization Bypass Through User-Controlled Key

Plane is an open-source project management tool. In 1.3.1 and earlier, EntityAssetEndpoint at the public project asset endpoint /api/public/assets/v2/anchor/anchor/ requires authentication for write operations but does not verify workspace or project membership. An authenticated user who knows a...

PT-2026-113647

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service DoS attack on the device...

Reaction Attack on CKKS Deployments with Asymptotically Optimal Query Complexity

We study a protocol-level reaction leakage in CKKS deployments where public coefficient-to-slot C2S evaluation keys are combined with a client's 1-bit validity response. Under this deployment surface, a malicious evaluator can recover a ternary secret key using asymptotically optimal $OH$ reactio...