PT-2026-87549

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use after free issue in Windows Remote Desktop Services allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Use afte...

PT-2026-88016

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A numeric truncation error occurs in Microsoft Office Word, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Numeric...

CVE-2026-69839: Uncaught Exception

Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network...

Linux Distros Unpatched Vulnerability : CVE-2026-78124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...

Linux Distros Unpatched Vulnerability : CVE-2026-78132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax. CVE-2026-78132 Note that Nessus relies...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022342 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0...

CVE-2026-80098

Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-83711

Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network...

PT-2026-85312

Name of the Vulnerable Software and Affected Versions Azure AI Language affected versions not specified Description Missing authentication for a critical function allows an unauthorized attacker to elevate privileges over a network without requiring any user interaction. Recommendations At the...

PT-2026-85311

Name of the Vulnerable Software and Affected Versions Microsoft Fabric affected versions not specified Description Microsoft Fabric contains a flaw where missing authorization allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no informatio...

CVE-2026-62916: Authentication Bypass Using an Alternate Path or Channel

Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-65818: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...

CVE-2026-69857: Authorization Bypass Through User-Controlled Key

Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network...

CVE-2026-70178: Missing Authorization

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network...

CVE-2026-70352: Missing Authentication for Critical Function

Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-83711: Authorization Bypass Through User-Controlled Key

Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-80098: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-85124: Improper Limitation of a Pathname to a Restricted Directory

@fastify/http-proxy versions before 11.6.2 do not validate proxied HTTP request paths for backslash based dot-segments before forwarding them to the configured upstream. The plain HTTP request handler skips the destination validation that the WebSocket path performs, and the underlying reply-from...

Linux Distros Unpatched Vulnerability : CVE-2026-82209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute...

snphost-0.7.0-3.1 on GA media (moderate)

snphost-0.7.0-3.1 on GA media Announcement ID: openSUSE-SU-2026:11654-1 Rating: moderate Cross-References: CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662 CVE-2026-45784 CVSS scores: CVE-2026-41677 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N...