PT-2026-91114

The severity is increased for this new vulnerability affecting Apache Storm CVE-2026-82427 https://t.co/3hV44a7z4s...

PT-2026-90863

Description Nimbus validated topology.blobstore.map against the calling subject at submission time only. The rebalance operation accepts configuration overrides and stripped a small set of keys from them, but never re-ran that validation, so a caller authorised to rebalance a topology could...

PT-2026-81922

Name of the Vulnerable Software and Affected Versions Ceph versions prior to 20.2.4 Ceph versions prior to 19.2.6 Description The CephX authentication protocol encrypts tickets using AES-128-CBC in an unauthenticated mode with a hard-coded initialization vector and no message authentication. This...

PT-2026-49113

Name of the Vulnerable Software and Affected Versions VS Revo RevoUninstaller versions 2.5.x through 2.6.x Description A heap-based buffer overflow exists in the IOCtl Handler function within the RevoDetector.sys library of the IOCTL Handler component. This issue requires local access to be...

PT-2026-42954

Name of the Vulnerable Software and Affected Versions Edimax EW-7438RPn version 1.31 Description A stack-based buffer overflow occurs in the formLicence function within the '/goform/formLicence' endpoint. This issue is triggered by the manipulation of the submit-url argument and can be initiated...

PT-2026-23858

Name of the Vulnerable Software and Affected Versions Wavlink NU516U1 version 251208 Description A flaw exists in the Wavlink NU516U1 device, specifically within the /cgi-bin/login.cgi file. Manipulation of the ipaddr argument in this file can lead to an out-of-bounds write condition, potentially...

PT-2026-21295

Name of the Vulnerable Software and Affected Versions D-Link DWR-M960 version 1.01.07 Description A security flaw exists in D-Link DWR-M960. The issue is a stack-based buffer overflow in the function sub 469104 of the file /boafrm/formIpv6Setup. The vulnerability is triggered by manipulating the...

PT-2026-21014

The severity is increased for this new vulnerability affecting D-Link DWR-M960 CVE-2026-2855 https://t.co/oK0VXyQheN...

PT-2026-23979

Name of the Vulnerable Software and Affected Versions Tenda FH1202 version 1.2.0.14408 Description A stack-based buffer overflow exists in the fromP2pListFilter function of the /goform/P2pListFilter file. The issue is triggered by manipulating the page argument and can be exploited remotely. The...