PT-2026-113368

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.9 Description A privilege escalation issue exists when the restConnector-2.0 feature is enabled. Recommendations At the moment, there is no information about a newer...

Apache HTTP Server mod_vhost_alias() Code Execution

The vulnerability of the modvhostalias function in the Apache HTTP Server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure or execute arbitrary code by sending a specially crafted HTTP...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Apache HTTP Server vulnerabilities (USN-8898-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8898-1 advisory. It was discovered that Apache HTTP Server's modrewrite module incorrectly handled...

Microsoft Windows: CVE-2026-85806: Network Policy Server (NPS) Remote Code Execution Vulnerability

Integer underflow wrap or wraparound in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...

CVE-2026-85806: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...

PT-2026-111402

Name of the Vulnerable Software and Affected Versions RUGGEDCOM CROSSBOW versions prior to V6.0 Description Insufficient server-side authorization checks for requests to schedule special operations allow an authenticated attacker with minimal privileges to schedule unauthorized operations on the...

Microsoft SQL Server: CVE-2026-83945: Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

Microsoft SQL Server: CVE-2026-85888: Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-97822: Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-97823: Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-97824: Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-97828: Role: DNS Server Information Disclosure Vulnerability

Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-88127: Windows SMB Server Elevation of Privilege Vulnerability

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69830: Windows DHCP Server Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

Microsoft SQL Server: CVE-2026-67626: Microsoft SQL Server Denial of Service Vulnerability

Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network...

Microsoft SQL Server: CVE-2026-65674: Microsoft SQL Server Remote Code Execution Vulnerability

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70087: Role: DNS Server Security Feature Bypass Vulnerability

Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-70083: Role: DNS Server Tampering Vulnerability

Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-70085: Role: DNS Server Tampering Vulnerability

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-70127: Windows Domain Name Service Remote Code Execution Vulnerability

Use after free in DNS Server allows an unauthorized attacker to execute code over a network...