PT-2026-64409

Name of the Vulnerable Software and Affected Versions Milkdown versions prior to 7.21.3 Description A stored cross-site scripting issue exists in the @milkdown/preset-commonmark and @milkdown/components packages. Attackers with document write access can execute arbitrary JavaScript in the browser...

PT-2026-64353

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur during the removal of a shared GPIO proxy's parent. This issue stems from an excessively wide critical section using a mutex embedded in the gpio shared entry...

PT-2026-64435

Name of the Vulnerable Software and Affected Versions Cloudreve versions prior to 4.17.0 Description An OAuth scope authorization bypass exists in the admin storage policy routes. A user with an OAuth bearer token scoped only to Admin.Read can access the 'POST /api/v4/admin/policy/oauth/signin'...

PT-2026-64293

A flaw was found in accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root without the validation and privilege drop performed by the classic handler. A local attacker with a systemd-homed-managed account can read arbitrary files accessible to the...

PT-2026-64282

Name of the Vulnerable Software and Affected Versions Apache NimBLE versions prior to 1.10.0 Description A reachable assertion issue exists in the ATT parser. A specially crafted ATT Read Multiple Variable Response BLE ATT OP READ MULT VAR RSP can trigger an assert, provided the Device Under Test...

PT-2026-64426

Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description An unsigned integer underflow in the soup filter input stream read until function leads to a heap buffer over-read during the parsing of multipart HTTP responses. A malicious HTTP server can...

PT-2026-64363

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.1 through 6.18.33 Description An issue exists in the MIPS architecture implementation where the smp send stop function parks secondary CPUs in stop this cpu. While the function marks the CPU as offline for the scheduler...

PT-2026-64304

Name of the Vulnerable Software and Affected Versions Loytec LIP-ME201C versions prior to 8.4.19 Loytec L-INX versions prior to 8.4.19 Loytec L-GATE versions prior to 8.4.19 Loytec L-ROC versions prior to 8.4.19 Loytec L-IOB versions prior to 8.4.19 Loytec L-DALI versions prior to 8.4.19 Loytec...

PT-2026-64307

Name of the Vulnerable Software and Affected Versions Devolutions PowerShell Universal versions prior to 2026.2.3 Description The automation jobs API contains a flaw where sensitive information is included in sent data. An authenticated user with scoped job or script read permissions can obtain...

PT-2026-64365

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the LoongArch architecture where the stop this cpu function marks CPUs as offline for the scheduler using set cpu onlinefalse but fails to notify the Read-Copy-Update...

PT-2026-64338

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the mac80211 module of the Linux kernel. The ieee80211 parse neg ttlm function incorrectly advances its cursor for every Traffic Identifier TID, regardles...

PT-2026-64290

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A denial of service can occur when remote policy references are manually retrieved via the API. This happens if a policy of excessive size is retrieved, leading to system instability or unavailabilit...

PT-2026-64423

Name of the Vulnerable Software and Affected Versions Weintek cMT3092X affected versions not specified Description An attacker can modify data that should be restricted to read-only access due to incorrect user management. Recommendations At the moment, there is no information about a newer versi...

PT-2026-64362

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.1.0-rc2 Description An issue exists in the KVM x86 hyper-v component where the bank index is not properly bounded when querying sparse banks. When handling a paravirtual TLB Translation Lookaside Buffer flush for L2, the...

PT-2026-64259

Name of the Vulnerable Software and Affected Versions GNU coreutils affected versions not specified Description GNU coreutils uniq contains an out-of-bounds read issue caused by incorrect handling of multibyte input when the -w --check-chars option is used. The find field function miscalculates t...

PT-2026-64380

Name of the Vulnerable Software and Affected Versions libssh2 versions prior to 1.11.1 Description A pre-authentication integer underflow exists in the ssh2 cipher crypt function within src/openssl.c. A malicious SSH server can trigger this issue during the handshake by negotiating AES-GCM cipher...

CVE-2026-29007

A flaw was found in U-Boot. A remote attacker can exploit an out-of-bounds read vulnerability in the tcprxstatemachine function when the Transmission Control Protocol TCP is enabled. By crafting a malicious packet with a mismatched IP total length and TCP data offset, an attacker can read beyond...

kernel: netfilter: xt_tcpmss: check remaining length before reading optlen

A flaw was found in the Linux kernel, specifically within the netfilter: xttcpmss module. A remote attacker could exploit this vulnerability by sending a specially crafted TCP packet. The TCP option parser does not properly validate the remaining option length, which results in an out-of-bounds...

CVE-2026-65694

Microweber CMS up to version 2.0.20 is affected by a path traversal in the static file controller. The vulnerability allows unauthenticated remote attackers to read arbitrary files by supplying directory traversal sequences in the path query parameter, exploiting normalize_path() failure to strip...

CVE-2026-65694

Microweber CMS through 2.0.20 contains a path traversal vulnerability in the static file controller that allows unauthenticated remote attackers to read arbitrary files by supplying directory traversal sequences in the path query parameter. Attackers can send a single unauthenticated HTTP GET...