PT-2026-70672

Name of the Vulnerable Software and Affected Versions Windows Active Directory affected versions not specified Description Inadequate encryption strength allows an authorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the...

CVE-2026-48437: Improper Certificate Validation

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interactio...

CVE-2026-48416: Incorrect Authorization

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction...

PT-2026-70741

Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description Visual Studio Code fails to fail securely, a condition known as failing open, which allows an unauthorized attacker to bypass a security feature over a network. Recommendations At...

CVE-2026-65675: Missing Authorization

No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-21279: Improper Input Validation

is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction...

CVE-2026-48376: Improper Encoding or Escaping of Output

is affected by an Improper Encoding or Escaping of Output vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized write access, causing a limited disruption to availability...

CVE-2026-71383: Incorrect Authorization

is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized read and write access, causing a limited disruption to availability. Exploitation of this...

PT-2026-70352

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An Incorrect Authorization issue allows for a security feature bypass. An attacker can bypass security measures to obtain unauthorized read and write access,...

CVE-2026-71390: Improper Input Validation

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user...

PT-2026-70376

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An improper input validation issue allows for a security feature bypass. An attacker can exploit this to gain unauthorized write access. This requires user interaction, such a...

CVE-2026-70338: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...

PT-2026-70453

Name of the Vulnerable Software and Affected Versions Windows Defender Firewall Service affected versions not specified Description Missing authorization in the Windows Defender Firewall Service allows an authorized attacker to locally bypass a security feature, which can affect the system...

PT-2026-70818

Name of the Vulnerable Software and Affected Versions Magento Open Source affected versions not specified Adobe Commerce affected versions not specified Adobe Commerce B2B affected versions not specified Description An incorrect authorization flaw allows a remote attacker to bypass security...

APSB26-92 : Security update available for Adobe Commerce

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical, important, and moderate vulnerabilities. Successful exploitation could result in security feature bypass, arbitrary code execution, and privilege escalation. Adobe is not aware of any...

PT-2026-70322

is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction...

CVE-2026-34635: Use of Hard-coded Cryptographic Key

is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user...

CVE-2026-48385: Improper Neutralization of Special Elements used in an OS Command

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write...

CVE-2026-62899: Inconsistent Interpretation of HTTP Requests

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-65777: Inadequate Encryption Strength

Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network...