PT-2026-94153

Name of the Vulnerable Software and Affected Versions Acer Agent Service affected versions not specified Description The Acer Agent Service component, included with NitroSense and PredatorSense, uses a hard-coded AES encryption key. This allows a local attacker to potentially access protected...

PT-2026-94349

Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions prior to 11.1.0.3 Description An issue exists where a low privileged attacker with local access could potentially exploit the system, leading to the exposure of sensitive information to an...

PT-2026-94139

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description Memory corruption occurs when copying large input data that exceeds normal allocation limits. This issue allows for a local attack vector that can significantly...

PT-2026-94140

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Memory corruption occurs during the processing of decode statistics. This issue is caused by insufficient validation of the offset against the structure size,...

CVE-2026-93337: Improper Neutralization of Argument Delimiters in a Command

NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or mtu property values containing trailing non-numeric content after a val...

CVE-2026-54587: Improper Link Resolution Before File Access

mport is the MidnightBSD Package Manager. Prior to 2.7.8, directory assets handled as ASSETDIR or ASSETDIROWNERMODE in libmport/bundlereadinstallpkg.c used path-based mportmkdirp, ownership, and permission operations. A local attacker able to modify part of the target installation tree could use...

CVE-2026-54575: Improper Neutralization of Special Elements used in an OS Command

mport is the MidnightBSD Package Manager. Prior to 2.7.8, privileged package fetch and cache-cleaning operations used race-prone path handling across libmport/fetch.c, libmport/clean.c, libmport/util.c, libmport/bundlereadinstallpkg.c, libmport/deleteprimative.c, and...

CVE-2026-50606: Use of Hard-coded Cryptographic Key

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key ...

CVE-2026-50605: Improper Access Control

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. Insufficient access controls within a privileged service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, this could lead to...

CVE-2026-50603: Use of Hard-coded Cryptographic Key

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to...

PT-2026-95017

Name of the Vulnerable Software and Affected Versions mport versions prior to 2.7.8 Description In the MidnightBSD Package Manager, directory assets handled as ASSET DIR or ASSET DIR OWNER MODE in the libmport/bundle read install pkg.c file utilize path-based mport mkdirp, ownership, and permissi...

PT-2026-99045

Name of the Vulnerable Software and Affected Versions NetworkManager-fortisslvpn affected versions not specified Description The nm-fortisslvpn-service improperly handles carriage-return/line-feed CR/LF characters within VPN connection profile credentials. A local unprivileged user can exploit th...

CVE-2026-15688: Incorrect Implementation of Authentication Algorithm

Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modifying part of the executable module in...

Ubuntu 22.04 LTS / 24.04 LTS : GNU Guix vulnerability (USN-8773-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8773-1 advisory. It was discovered that GNU Guix incorrectly made build outputs accessible to local users before their file metadata was finalized. A local...

PT-2026-94136

Name of the Vulnerable Software and Affected Versions GeoVision GV-Remote E-Map affected versions not specified Description A DLL hijacking issue exists in the GeoVision GV-Remote E-Map desktop application. The application loads dynamic-link libraries DLLs from an unsafe search path, which allows...

CVE-2026-81474: Heap-based Buffer Overflow

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-93375: Use of Incorrectly-Resolved Name or Reference

Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-93376: Out-of-bounds Read

Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the sandbox via a local program. Chromium security severity: Medium...

PT-2026-94378

Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

Linux Distros Unpatched Vulnerability : CVE-2026-92472

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gfnodedeactivateex of the file src/scenegraph/basescenegraph.c of the...