CVE-2026-83787: Authentication Bypass Using an Alternate Path or Channel

Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally...

CVE-2026-85810: Use After Free

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...

CVE-2026-97827: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-97825: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-97817: Heap-based Buffer Overflow

Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-97828: Buffer Over-read

Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-97822: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-83691: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally...

CVE-2026-97832: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-70189: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

PT-2026-113393

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.10 Description An authentication bypass flaw exists when the samlWeb-2.0 feature is enabled. This issue allows unauthenticated remote attackers to bypass enterprise...

PT-2026-113431

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2019 affected versions not specified Microsoft SQL Server 2022 affected versions not specified Microsoft SQL Server 2025 affected versions not specified Description An authenticated attacker with low privileges can execute...

PT-2026-113391

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server - Liberty versions 20.0.0.12 through 26.0.0.10 Description An unauthenticated remote attacker can bypass access controls configured on gRPC service methods. gRPC is a high-performance remote procedure call...

PT-2026-112702

Name of the Vulnerable Software and Affected Versions Windows Telephony Server affected versions not specified Description A use after free issue in Windows Telephony Server allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...

PT-2026-113140

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description A use after free issue in Windows DHCP Server allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use after free is a memory...

CVE-2026-87695: Inclusion of Functionality from Untrusted Control Sphere

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

PT-2026-111136

Name of the Vulnerable Software and Affected Versions SAP Manufacturing Integration and Intelligence versions 15.4 through 15.5 Description SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within the Configuration Service. An attacker with MII...

PT-2026-111805

Name of the Vulnerable Software and Affected Versions Visual Studio Tools for Applications affected versions not specified SQL Server Management Studio affected versions not specified Visual Studio Copilot extension affected versions not specified Description Improper control of code generation...

PT-2026-111380

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC Drive Controller CPU 1504D TF affected versions not specified Description Devices do not properly restrict executable content within imported trace files. An attacker could social engineer an authorized user with the "Read...

PT-2026-111575

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.5 and 9.0 Description A flaw in the CSIv2 inbound propagation handler allows a remote attacker to bypass authentication. Recommendations At the moment, there is no information about a newer version...