CVE-2026-44761

SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented sample credentials originating from sample configuration provided in SAP Help Portal documentation. If left unchanged, an unauthenticated attacker could use these well-known credentials to obtain a valid access token...

CVE-2026-15619

CVE-2026-15619 affects mosaxiv clawlet prior to 0.2.10. The vulnerable element is the web_fetch function in tools/tool_web_fetch.go of the IPv4 Handler. The issue arises from manipulating the url argument, enabling server-side request forgery (SSRF). The attack can be initiated remotely, and an e...

CVE-2026-15619 mosaxiv clawlet IPv4 tool_web_fetch.go web_fetch server-side request forgery

A weakness has been identified in mosaxiv clawlet up to 0.2.10. The impacted element is the function webfetch of the file tools/toolwebfetch.go of the component IPv4 Handler. This manipulation of the argument url causes server-side request forgery. The attack can be initiated remotely. The exploi...

PT-2026-58661

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An integer overflow or wraparound in the Remote Desktop Protocol RDP allows an unauthorized attacker to execute arbitrary code over a network. Recommendations At the moment, there i...

PT-2026-58996

Summary The StompSubframeDecoder fails to limit the total number of headers or their cumulative size per frame, allowing an attacker to cause an OutOfMemoryError, leading to a Denial of Service. Details io.netty.handler.codec.stomp.StompSubframeDecoder implements the STOMP protocol. The...

CVE-2026-50696: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Internet Key Exchange IKE Protocol allows an unauthorized attacker to deny service over a network...

CVE-2026-50497: Off-by-one Error

Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network...

PT-2026-58917

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.1 and 2.12.9, an MQTT client could include protocol control characters in subscription filters that were later forwarded as NATS protocol data to route or leafnode connections, corrupti...

PT-2026-58988

Unbounded Pod Log Read via Attacker-Controlled limitBytes/tailLines Causes Memory Exhaustion Summary The MKP Model Context Protocol for Kubernetes server exposes a get resource MCP tool that proxies Kubernetes pod log requests. User-supplied limitBytes and tailLines parameters are parsed as...

ROS-20260714-73-0055

The vulnerability of the rdp8decompresssegment function in the RDP protocol analysis tool for computer network traffic analysis in Wireshark is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause service failur...

ROS-20260714-73-0003

The vulnerability of the ASN.1 PER protocol analyzer and the Wireshark network traffic analyzer is related to uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

ROS-20260714-73-0032

The vulnerability of the OpenFlow v5 protocol analyzer used by Wireshark for analyzing computer network traffic involves executing a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

PT-2026-58517

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An out-of-bounds read in the Remote Desktop Protocol RDP allows an unauthorized attacker to disclose information over a network. This issue can be triggered when a user interacts with a...

PT-2026-58060

Name of the Vulnerable Software and Affected Versions Rockwell Automation FLEX 5000 adapters affected versions not specified Description A denial-of-service issue occurs due to improper handling of exceptional conditions when processing crafted CIP Common Industrial Protocol packets sent to the...

PT-2026-58160

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An issue exists where the allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to cause a denial-of-service over a...

PT-2026-58247

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network...

PT-2026-58305

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

PT-2026-58455

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Web Proxy Auto-Discovery Protocol WPAD, which is a protocol used to automatically configure web proxy settings. This flaw allows an authoriz...

ROS-20260714-73-0019

The vulnerability of the spotlightdissectqueryloop function in the AFP protocol analyzer Spotlight, a traffic analysis tool for computer networks developed by Wireshark, is related to an uncontrolled recursion. Exploiting this vulnerability could allow attackers to cause service failures...

PT-2026-57994

Allocation of resources without limits vulnerability in elixir-mint mint allows a remote HTTP/2 server to exhaust memory on the client host and cause a denial of service. The Mint.HTTP2.handle continuation/3 function in lib/mint/http2.ex accumulates the header-block fragment carried by each HTTP/...