PT-2026-63927

Unauthenticated Cross Site Scripting XSS in Manual - Documentation, Knowledge Base & Education WordPress Theme = 7.5.4 versions...

CVE-2026-65500: Missing Authorization

Unauthenticated Broken Access Control in Manual - Documentation, Knowledge Base & Education WordPress Theme = 7.5.4 versions...

PT-2026-63934

Contributor Cross Site Scripting XSS in Manual - Documentation, Knowledge Base & Education WordPress Theme = 7.5.4 versions...

July 18, 2026—KB5121767 (OS Builds 26200.8894 and 26100.8894) Out-of-band

None None...

July 14, 2026—KB5101649 (OS Build 28000.2525)

None None...

July 14, 2026—KB5099539 (OS Builds 19045.7548 and 19044.7548)

None None...

KLA91159 PE vulnerability in Microsoft Products (ESU)

Privilege escalation vulnerability was found in Microsoft Products ESU. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-58598 Exploitation CVE list CVE-2026-58598 high KB list 5099539 Solution Install necessary updates from the KB section, that are...

2026-07 .NET 8.0.29 Security Update for x86 Client (KB5104032)

2026-07 .NET 8.0.29 Security Update for x86 Client KB5104032...

2026-07 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB5099535)

2026-07 Cumulative Update for Windows 10 Version 1607 for x86-based Systems KB5099535...

2026-07 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5099535)

2026-07 Cumulative Update for Windows Server 2016 for x64-based Systems KB5099535...

2026-07 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5099538)

2026-07 Cumulative Update for Windows 10 Version 1809 for x86-based Systems KB5099538...

2026-07 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5099538)

2026-07 Cumulative Update for Windows 10 Version 1809 for x64-based Systems KB5099538...

2026-07 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5099539)

2026-07 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems KB5099539...

Security Bulletin: Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

Summary Langflow provides a visual interface for constructing and executing AI-powered agent workflows, exposing HTTP API endpoints for flow execution, file management, vector store operations, and Model Context Protocol MCP server configuration. An attacker could exploit insufficient validation...

July 14, 2026—KB5099538 (OS Build 17763.9020)

None None...

Description of the security update for Office 2016: July 14, 2026 (KB5002273)

None None...

July 14, 2026—KB5099444 (Monthly Rollup)

None None...

July 14, 2026—KB5099414 (OS Build 22631.7376)

None None...

July 14, 2026-Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 (KB5100990)

None None...

PYSEC-2026-2750 Open WebUI: RAG ACL Bypass in Milvus Multitenancy Mode

RAG ACL Bypass in Milvus Multitenancy Mode Summary This is a bypass of the fix for: - GHSA-h36f-rqpx-j5wx - CVE-2026-44560 - "Unauthorized File and Knowledge Base Content Access via RAG Vector Search" Open WebUI added collection-level ACL checks, but the patch can still be bypassed when Milvus...