PT-2026-70341

is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user...

PT-2026-70819

Name of the Vulnerable Software and Affected Versions Lightroom Classic affected versions not specified Description An Improper Limitation of a Pathname to a Restricted Directory, also known as Path Traversal, allows for arbitrary file system read. This issue enables an attacker to access sensiti...

PT-2026-70804

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code...

PT-2026-70320

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A stored Cross-Site Scripting XSS issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields. This results in the execution ...

PT-2026-70805

Name of the Vulnerable Software and Affected Versions Lightroom Classic affected versions not specified Description Deserialization of untrusted data allows for arbitrary code execution within the context of the current user. This occurs when a victim opens a malicious file, requiring user...

PT-2026-70344

Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description An OS Command Injection issue exists due to improper neutralization of special elements used in an OS command. This allows an attacker to execute arbitrary code in the context of the curre...

PT-2026-70825

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

PT-2026-70321

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An Improper Input Validation issue allows a low-privileged attacker to achieve privilege escalation, granting unauthorized read and write access. This...

PT-2026-70380

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An Improper Limitation of a Pathname to a Restricted Directory, known as Path Traversal, allows for arbitrary file system read. This issue enables an attacker to gain...

CVE-2026-68872

The apache-airflow-providers-amazon package is vulnerable to an authorization bypass in its SecretsManagerBackend and SystemsManagerParameterStoreBackend lookup paths. In deployments using multi-team mode , a caller from one team can resolve a secret belonging to another team by providing an ID t...

CVE-2026-68872 Apache Airflow Amazon provider: amazon SSM / Secrets Manager backends: team-scope guard bypass resolves another team's Connection or Variable

The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with either backend, a caller in o...

CVE-2026-68871

The apache-airflow-providers-yandex provider is vulnerable to an authorization bypass in its Yandex Lockbox secrets backend . In deployments utilizing multi-team mode , the get_conn_value and get_variable lookups in airflow/providers/yandex/secrets/lockbox.py fail to properly isolate secrets; spe...

CVE-2026-68871 Apache Airflow Yandex provider: yandex Lockbox backend: team-scope guard bypass resolves another team's Connection or Variable

The Yandex Lockbox secrets backend in Apache Airflow's Yandex provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a secret...

CVE-2026-68871 Apache Airflow Yandex provider: yandex Lockbox backend: team-scope guard bypass resolves another team's Connection or Variable

The Yandex Lockbox secrets backend in Apache Airflow's Yandex provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a secret...

CVE-2026-68871 Apache Airflow Yandex provider: yandex Lockbox backend: team-scope guard bypass resolves another team's Connection or Variable

The Yandex Lockbox secrets backend in Apache Airflow's Yandex provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a secret...

CVE-2026-68870 Apache Airflow Microsoft Azure provider: microsoft.azure Key Vault backend: team-scope guard bypass resolves another team's Connection or Variable

The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a...

CVE-2026-68870 Apache Airflow Microsoft Azure provider: microsoft.azure Key Vault backend: team-scope guard bypass resolves another team's Connection or Variable

The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a...

CVE-2026-68870 Apache Airflow Microsoft Azure provider: microsoft.azure Key Vault backend: team-scope guard bypass resolves another team's Connection or Variable

The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a...

PYSEC-2026-3648 Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanup

Summary A user with write access to one knowledge base could delete directories, and drop file embeddings, belonging to knowledge bases they do not control. The sync cleanup endpoint verified write access on the knowledge base named in the URL and then acted on the directory and file ids supplied...

CVE-2026-72564 fosrl Pangolin - Access Token Scope Bypass Allows Cross-Resource Authentication

An improper authorization vulnerability in fosrl/pangolin through v1.20.0 allows an authenticated remote attacker to authenticate to any resource in any organization by reusing an access token issued for a different resource...