EUVD-2026-56045

A server-side request forgery vulnerability in Pinry through 2.1.13 allows unauthenticated remote attackers to make the server issue HTTP requests to arbitrary internal or external hosts via the pin-from-URL feature. The feature passes the user-supplied URL directly to requests.get without host o...

CVE-2026-72560 HumanSignal Label Studio - Server-Side Request Forgery

A server-side request forgery vulnerability in HumanSignal Label Studio through 1.24.0.dev0 exists because SSRFPROTECTIONENABLED is set to false by default. The import-from-URL endpoint fetches any caller-supplied URL including internal loopback addresses on the default installation. An...

EUVD-2026-56030

A server-side request forgery vulnerability in HumanSignal Label Studio through 1.24.0.dev0 exists because SSRFPROTECTIONENABLED is set to false by default. The import-from-URL endpoint fetches any caller-supplied URL including internal loopback addresses on the default installation. An...

Security Bulletin: IBM Decision Intelligence Client Managed Software (Formerly Known as IBM Automation Decision Services) for July 2026- Multiple CVEs addressed

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Automation Decision Services. See full list below. Vulnerability Details CVEID:CVE-2026-59887 DESCRIPTION: linkify-it is a links recognition library with full...

CVE-2026-44762

SAP Data Services Management Console allows an overly permissive Content Security Policy CSP configuration and lacks certain restrictive directives, which could enable an authenticated malicious user to leverage this weakness in combination with another vulnerability to inject and execute malicio...

CVE-2026-58235

CVE-2026-58235 affects SAP NetWeaver Application Server Java (Adobe Document Service). The issue arises from use of outdated third-party cryptographic and data transfer libraries that have known weaknesses and were addressed in later versions. A low-privileged authenticated attacker could potenti...

EUVD-2026-55862

SAP Data Services Management Console allows an overly permissive Content Security Policy CSP configuration and lacks certain restrictive directives, which could enable an authenticated malicious user to leverage this weakness in combination with another vulnerability to inject and execute malicio...

CVE-2026-44762

CVE-2026-44762 describes a misconfigured Content Security Policy in SAP Data Services Management Console. The overly permissive CSP and lack of restrictive directives could enable an authenticated attacker, in combination with another vulnerability, to inject and execute scripts in the applicatio...

PT-2026-70587

Name of the Vulnerable Software and Affected Versions Windows Deployment Services affected versions not specified Description A use-after-free condition exists in Windows Deployment Services. This flaw allows an unauthorized attacker to execute arbitrary code over a network. Use-after-free is a...

PT-2026-70428

Name of the Vulnerable Software and Affected Versions Application Information Services affected versions not specified Description A use-after-free issue in Application Information Services allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw tha...

PT-2026-70022

Name of the Vulnerable Software and Affected Versions SAP Data Services Management Console affected versions not specified Description The application allows an overly permissive Content Security Policy CSP configuration and lacks restrictive directives. This weakness could enable an authenticate...

Intel® Workload Services Framework Software Advisory

Summary: A potential security vulnerability for some Intel® Workload Services Framework software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-28757 Description: Protection mechanism failure...

KB5120238: Windows 10 version 1809 / Windows Server 2019 Security Update (August 2026)

The remote Windows host is missing security update 5120238. It is, therefore, affected by multiple vulnerabilities - Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. CVE-2026-62878 - Use after free in Windows Deployment Services allows an...

PT-2026-70459

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A heap-based buffer overflow occurs in Windows Remote Desktop Services, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow...

PT-2026-70777

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to cause a local denial of service. This occurs when the system...

PT-2026-70336

Name of the Vulnerable Software and Affected Versions IntelR Workload Services Framework affected versions not specified Description A protection mechanism failure within Ring 3 the least privileged level of the CPU architecture where user applications run may allow an unprivileged software...

PT-2026-70270

Name of the Vulnerable Software and Affected Versions SeaweedFS versions prior to 4.24 Description An issue exists in the VolumeServer.FetchAndWriteNeedle function within weed/server/volume grpc remote.go that fetches a remote endpoint provided by the caller via weed/remote storage/s3/s3 storage...

PT-2026-70558

Name of the Vulnerable Software and Affected Versions Active Directory Certificate Services affected versions not specified Description A use after free issue in Active Directory Certificate Services allows an authorized attacker to execute arbitrary code over a network, which can affect the...

PT-2026-70170

n8n versions before 2.32.1 contain a server-side request forgery protection bypass vulnerability in the MCP Client node that allows authenticated users to bypass SSRF protections. Attackers can craft workflows that send requests to internal or blocked hosts without routing through SSRF protection...

KB5120233: Windows Server 2025 Security Update (August 2026)

The remote Windows host is missing security update 5120233 or hotpatch 5120228. It is, therefore, affected by multiple vulnerabilities - Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. CVE-2026-62815 - Stack-based buffer overflow in Windows DNS...