CVE-2026-59836: Improper Certificate Validation

A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow attacker to information disclosure via...

CVE-2026-59841: Improper Restriction of Communication Channel to Intended Endpoints

A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via...

CVE-2026-59840: Buffer Over-read

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all...

CVE-2026-12659: Double Free

A denial-of-service security issue exists in the affected products. The security issue stems from improper handling of exceptional conditions when processing crafted CIP packets sent to the adapter. A power cycle is required to recover the module and associated I/O...

CVE-2026-9140: Allocation of Resources Without Limits or Throttling

A denial-of-service security issue exists in the 1719-AENTR. The security issue stems from improper handling of a UDP unicast network storm, which causes the device to become overloaded and lose communication. A power cycle is required to recover...

CVE-2026-53566: Out-of-bounds Read

Out-of-bounds read vulnerability in Citrix Citrix Secure Access Client for Windows. This issue affects Citrix Secure Access Client for Windows: before 26.6.1.20...

CVE-2026-53565: Improper Privilege Management

Improper Privilege Management vulnerability in Citrix Secure Access Client for Windows, Citrix Citrix Endpoint Analysis Client for Windows. This issue affects Secure Access Client for Windows: before 26.6.1.20; Citrix Endpoint Analysis Client for Windows: before 26. 5.1.7...

CVE-2024-7708: Uncontrolled Resource Consumption

For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak. This is particularly the case for 100-Continue, but any request where the network is slow can leak...

CVE-2026-44767: Improper Neutralization of Input During Web Page Generation

setThemeRoot failed to enforce the sap-allowed-theme-origins allowlist. An attacker-controlled absolute cross-origin URL could be stored and used directly to construct a element, even when no tag was present in the document. The same bypass was reachable via the ?sap-themeRoot URL...

CVE-2026-50467: Use After Free

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-50657: Exposure of Private Personal Information to an Unauthorized Actor

Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally...

CVE-2026-50649: Deserialization of Untrusted Data

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally...

CVE-2026-50491: Out-of-bounds Read

Out-of-bounds read in Code Integrity DLL ci.dll allows an authorized attacker to elevate privileges locally...

CVE-2026-56195: Out-of-bounds Read

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...

CVE-2026-55028: Out-of-bounds Read

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...

build-magic (>=0.4.1rc0, <=0.5.1rc0), lemur (>=1.1.0, <=1.2.0) +10 more potentially affected by CVE-2026-44405 via paramiko (2.9.2)

paramiko PYPI version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - build-magic =0.4.1rc0, =1.1.0, =0.10.10, =1.0.0, =0.10.4, =0.2.0.1, =0.0.0.dev0, =1.27.0, =1.34.0 - wizardwebssh 1.9.0 Source cves: CVE-2026-444...

Skill-scanner Unsecured Network Binding Vulnerability

Description:A vulnerability in the API Server of Skill Scanner could allow a unauthenticated, remote attacker to interact with the server API and either trigger a denial of service DoS condition or upload arbitrary files.This vulnerability is due to an erroneous binding to multiple interfaces. An...

PYSEC-2026-2415 Skill-scanner Unsecured Network Binding Vulnerability

Description: A vulnerability in the API Server of Skill Scanner could allow a unauthenticated, remote attacker to interact with the server API and either trigger a denial of service DoS condition or upload arbitrary files. This vulnerability is due to an erroneous binding to multiple interfaces. ...

Red-Team-vs-Blue-Team-Security-Simulation

Red Team vs Blue Team Security Simulation An interactive secu...

PT-2026-59089

Description: A vulnerability in the API Server of Skill Scanner could allow a unauthenticated, remote attacker to interact with the server API and either trigger a denial of service DoS condition or upload arbitrary files. This vulnerability is due to an erroneous binding to multiple interfaces. ...