VulnCheck KEV: CVE-2024-12253

The Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'savesettings', 'exportcsv', and 'simpleecommcart-action' actions in all versions up to, and including, 3.1.2. This makes it...

VulnCheck KEV: CVE-2024-13693

The Enfold theme for WordPress is vulnerable to unauthorized access of data due to a missing capability check in avia-export-class.php in all versions up to, and including, 6.0.9. This makes it possible for unauthenticated attackers to export all avia settings which may included sensitive...

PT-2026-111801

Name of the Vulnerable Software and Affected Versions FortiSandbox versions 4.4.0 through 4.4.9 FortiSandbox versions 5.0.0 through 5.0.6 FortiSandbox PaaS versions 4.4.x and earlier FortiSandbox PaaS versions 5.0.0 through 5.0.6 Description Improper access control and session management in the w...

PT-2026-111678

Name of the Vulnerable Software and Affected Versions Leantime versions prior to 3.10.0 Description The JSON-RPC dispatcher in app/Domain/Api/Controllers/Jsonrpc.php exposes public API service methods because PermissionEnforcer::enforce allows methods that lack a RequiresPermission attribute. An...

PT-2026-111778

Name of the Vulnerable Software and Affected Versions Fortinet FortiMail versions 7.6.0 through 7.6.3 Fortinet FortiMail versions 7.4.0 through 7.4.5 Fortinet FortiMail versions 7.2.0 through 7.2.8 Description An SQL Injection issue exists where improper neutralization of special elements used in...

PT-2026-111589

Name of the Vulnerable Software and Affected Versions 1732E ArmorBlock I/O versions prior to 3.013 Description An authentication bypass issue exists in the integrated webserver of the device. An unauthenticated attacker with network reachability to the management interface can change the webserve...

CVE-2026-105994: Incorrect Authorization

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...

PT-2026-113516

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description Improper Certificate Validation allows a security feature bypass, enabling an attacker to gain unauthorized write access. This issue can be exploited without any user...

CVE-2026-107917: Improper Input Validation

Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a...

CVE-2026-107918: Improper Input Validation

Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in a controlled research environment using a...

PT-2026-113362

Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description An Incorrect Authorization issue allows a low-privileged attacker to bypass security measures and obtain unauthorized write access. This security feature bypass does not require any user...

PT-2026-111620

🚨 CVE-2026-107918 Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in a controlled research...

Microsoft Windows: CVE-2026-85809: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

Microsoft Windows: CVE-2026-85792: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

PT-2026-113371

Symantec Endpoint Detection and Response SEDR Console, prior to 4.13, may be susceptible to a Cross-Site Scripting XSS vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting i...

Microsoft Windows: CVE-2026-96300: RPC Endpoint Mapper Service Denial of Service Vulnerability

Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network...

PT-2026-111627

Name of the Vulnerable Software and Affected Versions NETGEAR RAX/CAX series models affected versions not specified Description An insufficient input validation issue exists in the website blocking feature Block Sites. This allows a network-adjacent attacker with network access, such as WiFi...

PT-2026-113512

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description Improper input validation allows an attacker to bypass security features and obtain unauthorized write access. This issue can be exploited without any user interaction...

PT-2026-113509

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's...

PT-2026-112728

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description A Remote Code Execution issue in the Windows Routing and Remote Access Service RRAS allows an attacker to gain unauthorized access to a victim's machine...