PT-2026-77847

🚨 CVE-2026-70852 Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain component: Internal Operations. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-77800

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Project Planning and Control versions 12.2.3 through 12.2.15 Description An issue exists in the Change Management component of the Oracle Project Planning and Control product. A low privileged attacker with netwo...

CVE-2026-13365

IBM Planning Analytics 2.0, and 2.1 Local is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

CVE-2026-13365

IBM Planning Analytics 2.0, and 2.1 Local is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

CVE-2026-13365 IBM Planning Analytics Local is affected by security vulnerabilities

IBM Planning Analytics 2.0, and 2.1 Local is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

EUVD-2026-58360

IBM Planning Analytics 2.0, and 2.1 Local is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

CVE-2026-13365

IBM Planning Analytics Local (affected: 2.0 and 2.1 Local) is vulnerable to cross-site request forgery (CSRF) via CVE-2026-13365. The flaw allows an attacker to perform malicious actions on behalf of an authenticated user when the user visits a crafted page, as described in the IBM Security Bulle...

Security Bulletin: IBM Planning Analytics Local is affected by security vulnerabilities

Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by security vulnerabilities. These vulnerabilities have been addressed in IBM Planning Analytics Local v2.0 - IBM Planning Analytics Workspace version 2.1.23. Vulnerability Details CVEID:CVE-2026-47244...

Weaponized AI: The Commoditization of Cybercrime

Weaponized AI: The Commoditization of Cybercrime By Jambul Tologonov · August 12, 2026 Executive Summary The Trellix Advanced Research Center has been actively monitoring dark web forums and criminal communication channels for emerging threats tied to artificial intelligence AI. What we are...

CVE-2026-58245

CVE-2026-58245 concerns SAP Advanced Planning and Optimization (Model Mix Planning), where a hard-coded credential in the application’s source enables an attacker with HIGH privileges and no user interaction to bypass authorization and delete specific planning-related restrictions. The descriptio...

PT-2026-70035

Name of the Vulnerable Software and Affected Versions SAP Advanced Planning and Optimization Model Mix Planning affected versions not specified Description The application contains a hardcoded credential within its source code used for authorization checks when accessing specific functionalities...

CVE-2026-10545

IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user...

CVE-2026-10545

IBM Planning Analytics Local 2.1.0–2.1.21 is vulnerable to an open redirect via a crafted URL, enabling redirection to arbitrary external sites. In SSO authentication flows, this could expose session tokens and allow session hijacking. Affected component: open redirect in the web flow; root cause...

EUVD-2026-51261

IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user...

CVE-2026-10545 IBM Planning Analytics Local is affected by Open Redirect

IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user...

CVE-2026-10545 IBM Planning Analytics Local is affected by Open Redirect

IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user...

CVE-2026-10545

IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user...

PT-2026-66556

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics Local versions 2.1.0 through 2.1.21 Description An open redirect exists that allows an attacker to redirect users to arbitrary external websites using a crafted URL. When this occurs within Single Sign-On SSO...

CVE-2026-66412

Leantime 3.6.2 and prior contains a broken access control vulnerability that allows authenticated users to read milestone data from projects they are not assigned to by supplying arbitrary integer milestone IDs to the tickets.getMilestone JSON-RPC endpoint. Attackers can enumerate integer milesto...

PT-2026-64852

Name of the Vulnerable Software and Affected Versions Leantime versions prior to 3.6.3 Description Authenticated users can access milestone data from projects to which they are not assigned. This is possible by providing arbitrary integer milestone IDs to the 'tickets.getMilestone' JSON-RPC...