EUVD-2026-43594

SAP Create Single Payment does not perform necessary authorization checks for an authenticated user, a restricted user could access specific entity set keys resulting in disclosure of information. This has low impact on confidentiality, with no impact on integrity and availability of the...

CVE-2026-44768

SAP CRM WebClient UI allows an attacker to inject and execute malicious scripts in the context of the application due to the absence of a Content Security Policy CSP configuration for certain restrictive directives. This vulnerability has a low impact on the integrity of the application...

ROS-20260714-73-0048

The vulnerability of the KILLCLIENT command in the PostgreSQL PgBouncer connection pool software is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

PT-2026-58149

Name of the Vulnerable Software and Affected Versions Microsoft Windows DNS affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to perform local tampering, which can affect the system. Recommendations At the moment, there is no...

PT-2026-60113

Name of the Vulnerable Software and Affected Versions nebula-mesh affected versions not specified Description Certificate revocation is not enforced within the mesh because the agent fails to process the blocklist provided by the server. While the server correctly computes and ships the per-CA...

PT-2026-58556

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Missing authorization allows an authorized attacker to elevate privileges over a network, which enables them to affect the system. Recommendations At the moment, there is ...

PT-2026-58260

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description Missing...

CVE-2025-56365

A reachable assertion vulnerability exists in the Matter SDK connectedhomeip before 1.4.0, in the interaction model command processing logic. When an InvokeCommandRequest is sent to a nonexistent endpoint and cluster e.g., 0x34, the code incorrectly treats the endpoint as valid due to missing...

Security Updates for Microsoft SQL Server (July 2026)

The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over...

Security Updates for Microsoft Word Products (July 2026)

The Microsoft Word Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-55032, CVE-2026-55128 - Stack-based buffer overflow in Microsoft Office...

KB5099445: Windows Server 2012 Security Update (July 2026)

The remote Windows host is missing security update 5099445. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows Message Queuing...

KB5101649: Windows 11 Version 26H1 Security Update (July 2026)

The remote Windows host is missing security update 5101649. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

Linux Distros Unpatched Vulnerability : CVE-2026-53364

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: Fix memory leak in hcilebigterminate hcilebigterminate allocates...

Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-56365

A reachable assertion vulnerability exists in the Matter SDK connectedhomeip before 1.4.0, in the interaction model command processing logic. When an InvokeCommandRequest is sent to a nonexistent endpoint and cluster e.g., 0x34, the code incorrectly treats the endpoint as valid due to missing...

PT-2026-58422

Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description A missing authentication check for a critical function in the Windows Server Update Service allows an authorized attacker to elevate privileges over a network...

PT-2026-58196

Name of the Vulnerable Software and Affected Versions Windows Spaceport.sys affected versions not specified Description Missing authentication for a critical function in the Spaceport.sys driver allows an authorized attacker to elevate privileges locally on the system. Recommendations At the...

PT-2026-58270

Name of the Vulnerable Software and Affected Versions Azure CycleCloud versions prior to 8.9.1-3806 Description Missing authorization allows an authorized attacker to elevate privileges over a network. Recommendations Upgrade to build 8.9.1-3806...

CVE-2025-56365

A reachable assertion vulnerability exists in the Matter SDK connectedhomeip before 1.4.0, in the interaction model command processing logic. When an InvokeCommandRequest is sent to a nonexistent endpoint and cluster e.g., 0x34, the code incorrectly treats the endpoint as valid due to missing...

CVE-2025-56365

Summary (CVE-2025-56365): A reachable assertion vulnerability exists in Matter SDK (connectedhomeip) before 1.4.0, in the interaction model command processing logic. If an InvokeCommandRequest targets a nonexistent endpoint and cluster (e.g., 0x34), CodegenDataModelProvider::Invoke lacks proper c...