PT-2026-88506

Impact The OAuth Dynamic Client Registration endpoints validated field sizes only for redirect uris, leaving client name and grant types bounded by presence checks alone. An unauthenticated remote caller could submit arbitrarily large values in either field and have them persisted to the database...

CVE-2026-86075: Allocation of Resources Without Limits or Throttling

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the OAuth Dynamic Client Registration endpoint bounded redirecturis but accepted arbitrarily large clientname and granttypes values. An unauthenticated remote caller could repeatedly persist oversized values in...

KB5123065: Windows Server 2012 Security Update (September 2026)

The remote Windows host is missing security update 5123065. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

KB5123066: Windows Server 2012 R2 Security Update (September 2026)

The remote Windows host is missing security update 5123066. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

KB5123099: Windows 10 Version 1607 / Windows Server 2016 Security Update (September 2026)

The remote Windows host is missing security update 5123099. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

KB5122878: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (September 2026)

The remote Windows host is missing security update 5122878. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

KB5124012: Windows 11 Version 26H1 Security Update (September 2026)

The remote Windows host is missing security update 5124012. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

KB5122880: Windows 11 version 23H2 Security Update (September 2026)

The remote Windows host is missing security update 5122880. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

PT-2026-88154

A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...

PT-2026-88020

Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A buffer over-read in Windows Storage allows an unauthorized attacker to disclose sensitive information and affect the system through a physical attack. A buffer over-read occurs when...

PT-2026-87668

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-86670: Use of Password Hash With Insufficient Computational Effort

A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...

CVE-2026-78516: Buffer Over-read

Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally...

CVE-2026-82062: Incorrect Authorization

A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container...

CVE-2026-69381: Out-of-bounds Read

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack...

KB5124008: Windows 11 Version 24H2 / 25H2 / 26H2 Security Update (September 2026)

The remote Windows host is missing security update 5124008. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

CVE-2026-69389: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...

CVE-2026-68839: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-72937: Out-of-bounds Read

Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally...

CVE-2026-69527: Out-of-bounds Read

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally...