PT-2026-93825

Name of the Vulnerable Software and Affected Versions Sentry Seer affected versions not specified Description Sentry Seer is subject to a multi-stage trust-boundary violation where unauthenticated telemetry input can be executed as code within a privileged automation environment. The issue occurs...

CVE-2026-90999: Improper Input Validation

Sentry Seer is vulnerable to a multi-stage trust-boundary violation that allows unauthenticated attacker-controlled telemetry to become code that is executed by an agent in a privileged automation environment. An external attacker can submit fabricated Sentry events without having access to the...

macnoise v1.0.0

MacNoise MacNoise generates real macOS telemetry: network connections, file writes, process spawns, plist mutations, TCC probes, and more. Point it at a machine running your EDR, SIEM, or firewall stack and see what actually fires - not what the vendor datasheet claims will fire. For background o...

CVE-2026-76863

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the mod_qos_bandwidth plan.json handling, specifically within filter_conns_dump_cgi.c and IGD_CgiCall.c. Authenticated users with broad roles can access QoS read routes to obtain live network telemetry...

PT-2026-93197

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the mod qos bandwidth plan.json handling within filter conns dump cgi.c and IGD CgiCall.c. Authenticated users with broad roles can access these QoS read routes to obtain live network telemetry beyond...

EUVD-2026-77692

OpenTelemetry, also known as OTel, is a vendor-neutral open source Observability framework for instrumenting, generating, collecting, and exporting telemetry data such as traces, metrics, and logs. Prior to 0.154.0, the Sentry exporter reads the remote OTLP sender-controlled service.name resource...

Malicious code in platform-telemetry-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7464733f1d7353ae3aa3c9da2c60116c92298bfd84c94a6cba4e5f423cb0a0eb The package contains PTH file triggering the loader on every Python initialization. The loader tries to download next stage payload stored in chunks in DNS...

MAL-2026-16141 Malicious code in platform-telemetry-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7464733f1d7353ae3aa3c9da2c60116c92298bfd84c94a6cba4e5f423cb0a0eb The package contains PTH file triggering the loader on every Python initialization. The loader tries to download next stage payload stored in chunks in DNS...

Umbra v1.1.0

This is the repo for Umbra browser dustribution. Umbra source code is not found here, we build umbra with a script named fern.js Out build system can be found here:https://github.com/openconstruct/user-agent-desktop Umbra is an opnionated privacy browser based on Mozilla Firefox ESR. All telemetr...

CVE-2026-68847

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

EUVD-2026-73550

Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network...

CVE-2026-69625

A heap-based buffer overflow in Windows Connected User Experiences and Telemetry (UXTelemetry) allows an authorized attacker to elevate privileges over a network. The vulnerability requires low privileges and user interaction , but results in high impact to confidentiality, integrity, and availab...

EUVD-2026-73197

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-68824

A race condition (concurrent execution using a shared resource with improper synchronization) in Windows Connected User Experiences and Telemetry allows an authorized local attacker to escalate privileges. The vulnerability is rated CVSS 7.0 (High) with local attack vector, high complexity, and f...

EUVD-2026-73191

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-68824: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-69625: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network...

PT-2026-87315

Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally...

CVE-2026-68847: Use After Free

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-69267: Insufficient Granularity of Access Control

Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally...