CVE-2026-100755 Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain deployment configurations, could have allowed an authenticated user to poison cached page content served to other users due to improper cac...

CVE-2026-100755

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain deployment configurations, could have allowed an authenticated user to poison cached page content served to other users due to improper cac...

CVE-2026-100755 Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain deployment configurations, could have allowed an authenticated user to poison cached page content served to other users due to improper cac...

CVE-2026-100755

GitLab CE/EE versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 are vulnerable to cache poisoning due to improper cache key construction . Under specific deployment configurations, an authenticated user could poison cached page content served to other users. This issue s...

EUVD-2026-98211

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain deployment configurations, could have allowed an authenticated user to poison cached page content served to other users due to improper cac...

PT-2026-112065

Name of the Vulnerable Software and Affected Versions Windows Key Distribution Center affected versions not specified Description Incorrect authorization in the Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network. Recommendations At the moment...

Combining Post-Quantum Cryptography and Quantum Key Distribution: Taxonomy, Constructions, Proofs, Standards, Deployments and Open Problems

Post-quantum cryptography PQC and quantum key distribution QKD address the quantum threat from opposite directions: PQC replaces vulnerable public-key algorithms with schemes believed to resist quantum cryptanalysis, while QKD derives keys whose secrecy rests on physical assumptions rather than...

PT-2026-113386

The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICEALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryption key, and logs. These permissions allow any local service account on the host to read the AES...

Microsoft Windows: CVE-2026-88140: Windows Key Storage Provider Information Disclosure Vulnerability

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83843: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

Out-of-bounds read in Windows Internet Key Exchange IKE Protocol allows an unauthorized attacker to deny service over a network...

PT-2026-111782

Name of the Vulnerable Software and Affected Versions FortiSandbox versions 5.2.0 through 5.2.1 FortiSandbox versions 5.0.0 through 5.0.6 FortiSandbox version 4.4 FortiSandbox Cloud versions 5.2.0 through 5.2.1 FortiSandbox Cloud versions 5.0.0 through 5.0.6 FortiSandbox Cloud version 4.4...

PT-2026-111628

Name of the Vulnerable Software and Affected Versions MCP Context Forge versions prior to 1.0.2 Description An issue exists where the software ships with a known JWT SECRET KEY in mcpgateway/config.py and .env.example. The verify jwt token function accepts HS256 tokens signed with this key, and t...

PT-2026-111158

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 16.2 through 19.2.7 GitLab CE/EE versions 19.3 through 19.3.4 GitLab CE/EE versions 19.4 through 19.4.1 Description Under certain deployment configurations, an authenticated user can poison cached page content served to...

PT-2026-112057

Name of the Vulnerable Software and Affected Versions Windows Key Storage Provider affected versions not specified Description An out-of-bounds read occurs in the Windows Key Storage Provider, which allows an authorized attacker to disclose sensitive information locally...

CVE-2026-88140: Out-of-bounds Read

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

CVE-2026-69506: Out-of-bounds Read

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

CVE-2026-100755: Acceptance of Extraneous Untrusted Data With Trusted Data

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain deployment configurations, could have allowed an authenticated user to poison cached page content served to other users due to improper cac...

CVE-2026-88132: Origin Validation Error

Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network...

CVE-2026-85925: Improper Restriction of Communication Channel to Intended Endpoints

Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network...

Microsoft Windows: CVE-2026-69506: Windows Key Storage Provider Information Disclosure Vulnerability

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...