PT-2026-62085

Name of the Vulnerable Software and Affected Versions exo-explore exo version 1.0.69 Description An issue allows a remote attacker to escalate privileges without authentication. This is possible through the 'GET /state' and 'DELETE /instance/instance id' endpoints, where instance id is a variable...

PT-2026-63237

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS US versions 12.2.3 through 12.2.15 Description An issue exists in the US Payroll Year End component of the Oracle HRMS US product. A low privileged attacker with network access via HTTP can compromise the...

PT-2026-63236

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Work in Process versions 12.2.5 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-62685

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description An issue exists in the Web Content Management component of Oracle Fusion Middleware. A low privileged attacker with network access via HTTP can...

PT-2026-62768

Name of the Vulnerable Software and Affected Versions Oracle Complex Maintenance, Repair and Overhaul versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite. A low...

PT-2026-62939

Vulnerability in the Oracle Inventory Optimization product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Inventory...

PT-2026-62549

Name of the Vulnerable Software and Affected Versions Oracle Advanced Inbound Telephony versions 12.2.3 through 12.2.15 Description A flaw in the SDK client integration component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized...

ROS-20260721-73-0018

The vulnerability of the Permissions control element in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

PT-2026-62256

Name of the Vulnerable Software and Affected Versions MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 9.7.0 through 9.7.1 Description A flaw in the Server: Optimizer component allows a low privileged attacker with network access via multiple protocols to compromise the system...

PT-2026-62276

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: JSON Duality. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multip...

PT-2026-62274

Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/Net versions 9.7.0 through 9.7.1 Description An issue in the MySQL Connectors product allows an unauthenticated attacker with network access via multiple protocols to compromise the system. Successful exploitation can...

ROS-20260721-73-0021

The vulnerability of the File System Access API interface in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

ROS-20260721-73-0019

The vulnerability of the Direct Sockets API interface in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

PT-2026-62969

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description An issue exists...

PT-2026-62138

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description A flaw in the...

CVE-2026-8169

CVE-2026-8169 concerns ExtremeXOS (EXOS) where the privileged debug-mode access relies on a challenge-response mechanism. The challenge is generated from an insufficiently random source, allowing, under certain conditions, an attacker to predict the expected response and activate debug-mode witho...

CVE-2026-8169 ExtremeXOS Debug-Mode Privilege Escalation via Weak PRNG

ExtremeXOS EXOS uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using an insufficiently random source, which under certain conditions may allow an attacker to predict the expected response and activate debug-mode...

CVE-2026-8169

ExtremeXOS EXOS uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using an insufficiently random source, which under certain conditions may allow an attacker to predict the expected response and activate debug-mode...

EUVD-2026-46047

ExtremeXOS EXOS uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using an insufficiently random source, which under certain conditions may allow an attacker to predict the expected response and activate debug-mode...

gnutls: gnutls: Authentication Bypass via NUL Character in Username

A flaw was found in gnutls. Servers configured with RSA-PSK Rivest–Shamir–Adleman – Pre-Shared Key wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass...