USN-8826-1: LXC vulnerabilities

Maher Azzouzi discovered that LXC did not correctly handle logging certain failure messages. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. CVE-2022-4795...

PT-2026-99875

Name of the Vulnerable Software and Affected Versions Enocta Platform versions prior to 2026-09-28 Description An authorization bypass exists due to the use of user-controlled keys, which allows for the exploitation of trusted identifiers. Recommendations Update Enocta Platform to a version...

CVE-2026-101093: Cross-Site Request Forgery (CSRF)

Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to delete user groups without token verification. Attackers can craft malicious links or pages that trick authenticated administrators into deleting custom groups and their associate...

PT-2026-102389

Name of the Vulnerable Software and Affected Versions Cotonti version 1.0.0 Description A cross-site request forgery CSRF issue exists in the 'admin.users.php' endpoint. This occurs because the system fails to perform token verification, allowing an attacker to trick an authenticated administrato...

PT-2026-99775

Name of the Vulnerable Software and Affected Versions Blacklist Manager for WooCommerce WordPress plugin versions 1.3.0 through 2.3.1 Description The plugin fails to enforce user blocking across all authentication paths. This allows users who have been blocked by the site owner to continue...

PT-2026-102404

Name of the Vulnerable Software and Affected Versions mall4j versions prior to 4.0 Description A missing authentication flaw exists in the 'PUT /user/updatePwd' endpoint. This allows unauthenticated attackers to reset the password of any storefront account by providing a target username in the...

PT-2026-99788

Name of the Vulnerable Software and Affected Versions Apache Roller version 6.1.5 Description An authorization bypass exists that allows an authenticated user with authoring rights on one weblog to read, modify, or delete resources belonging to another weblog. This occurs through unscoped...

PT-2026-99958

FreePBX is an open source IP PBX. Prior to versions 16.0.39 and 17.0.7, users authenticated via User Control Panel UCP are able to execute arbitrary commands on the PBX as the webserver user typically asterisk using specially crafted HTTP strings. Authenticated access to UCP is required. Note tha...

CVE-2026-101145: Improper Neutralization of Special Elements used in an LDAP Query

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Management. Such manipulation of the argument Username leads to ldap injection. The attack can be executed remotely. The...

CVE-2026-54674: Improper Neutralization of Special Elements used in an OS Command

FreePBX is an open source IP PBX. Prior to versions 16.0.39 and 17.0.7, users authenticated via User Control Panel UCP are able to execute arbitrary commands on the PBX as the webserver user typically asterisk using specially crafted HTTP strings. Authenticated access to UCP is required. Note tha...

CVE-2026-82323: Authorization Bypass Through User-Controlled Key

Authorization bypass through User-Controlled key vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows Exploitation of Trusted Identifiers. This issue affects Enocta Platform: through 2026-09-28...

CVE-2026-86530: Improper Neutralization of Special Elements used in an OS Command

BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP request and execute an arbitrary OS command...

PT-2026-99908

A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and access management. The issue occurs when the listener is configured to include the idp tag. An unauthenticated attacker can send requests to the identity broker login endpoint using...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use uninterruptible resv lock for plane updates CVE-2026-64098 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPFMAPTYPEINODESTORAGE creation if BPF LSM is uninitialize...

PT-2026-102408

Name of the Vulnerable Software and Affected Versions mall4j versions prior to 4.1 Description The software fails to enforce authorization checks on GET endpoints within the UserAddrController used to retrieve customer address data. Authenticated attackers can access the '/user/addr/page' and...

PT-2026-102345

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Management. Such manipulation of the argument Username leads to ldap injection. The attack can be executed remotely. The...

CVE-2026-101333: Allocation of Resources Without Limits or Throttling

A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and access management. The issue occurs when the listener is configured to include the idp tag. An unauthenticated attacker can send requests to the identity broker login endpoint using...

CVE-2026-55157: Improper Neutralization of Special Elements used in an OS Command

Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to version 5.1.0, token-optimizer-mcp is vulnerable to OS command injection in the smartuser tool. Any MCP client that can call the smartuser too...

CVE-2026-96283

The Flatpak software suite is affected by a cross-user vulnerability where calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull operation removes it from internal tracking without actually cancelling the action. This results in orphaned pulls that the owning user cannot ...

CVE-2026-96283 Flatpak: flatpak: flatpak-system-helper cross-user cancelpull orphans another user's ongoing pull

By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped...