PT-2026-111778

Name of the Vulnerable Software and Affected Versions Fortinet FortiMail versions 7.6.0 through 7.6.3 Fortinet FortiMail versions 7.4.0 through 7.4.5 Fortinet FortiMail versions 7.2.0 through 7.2.8 Description An SQL Injection issue exists where improper neutralization of special elements used in...

PT-2026-111589

Name of the Vulnerable Software and Affected Versions 1732E ArmorBlock I/O versions prior to 3.013 Description An authentication bypass issue exists in the integrated webserver of the device. An unauthenticated attacker with network reachability to the management interface can change the webserve...

CVE-2026-105994: Incorrect Authorization

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...

PT-2026-113516

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description Improper Certificate Validation allows a security feature bypass, enabling an attacker to gain unauthorized write access. This issue can be exploited without any user...

CVE-2026-107917: Improper Input Validation

Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a...

CVE-2026-107918: Improper Input Validation

Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in a controlled research environment using a...

PT-2026-111620

🚨 CVE-2026-107918 Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in a controlled research...

Microsoft Windows: CVE-2026-85809: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

Microsoft Windows: CVE-2026-85792: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

PT-2026-113371

Symantec Endpoint Detection and Response SEDR Console, prior to 4.13, may be susceptible to a Cross-Site Scripting XSS vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting i...

Microsoft Windows: CVE-2026-96300: RPC Endpoint Mapper Service Denial of Service Vulnerability

Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network...

PT-2026-113512

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description Improper input validation allows an attacker to bypass security features and obtain unauthorized write access. This issue can be exploited without any user interaction...

PT-2026-113509

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's...

PT-2026-112728

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description A Remote Code Execution issue in the Windows Routing and Remote Access Service RRAS allows an attacker to gain unauthorized access to a victim's machine...

VulnCheck KEV: CVE-2025-13880

The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets Google Reviews, YouTube Feed, Photo Feeds, and More plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the getAdvanceSettings and saveAdvanceSettings...

CVE-2026-109428: Interpretation Conflict

Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauthorized commands by exploiting a parsing discrepancy between tree-sitter-bash and bash in handling backslash-newline line continuations in the extractcommands function of bash.py...

Microsoft Windows: CVE-2026-85339: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

Microsoft Windows: CVE-2026-70158: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

VulnCheck KEV: CVE-2026-3045

The Appointment Booking Calendar — Simply Schedule Appointments plugin for WordPress is vulnerable to unauthorized access of sensitive data in all versions up to and including 1.6.9.29. This is due to two compounding weaknesses: 1 a non-user-bound publicnonce is exposed to unauthenticated users...

PT-2026-113527

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An improper verification of cryptographic signatures allows for a security feature bypass. This issue enables an attacker to bypass security measures and obtain unauthorized...