Intel® Data Center Attestation Primitives (Intel® DCAP) Advisory

Summary: A potential security vulnerability in the Quote Verification Library QVL in Intel® DCAP may result in integrity failure in measurement and information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20702...

PT-2026-70539

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A use after free issue in Windows DNS allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Use after free is a memory corruption flaw that...

Fedora 44 : kernel (2026-d232156d86)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d232156d86 advisory. The 7.1.8 stable kernel updates contain a number of important fixes across the tree. We are now specifying all kernel updates as security because upstream wi...

PT-2026-70942

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme s6a subscription data from avp of the file src/mme/mme-fd-path.c of the component Diameter S6a Interface. Executing a manipulation of the argument msisdn len can lead to heap-based buffer overflow. ...

PT-2026-70845

A vulnerability was found in Open5GS up to 2.7.1. This affects the function hss ogs diam s6a air cb/hss ogs diam s6a ulr cb of the file src/hss/hss-s6a-path.c of the component Diameter S6a Interface. Performing a manipulation of the argument os.len results in stack-based buffer overflow. It is...

PT-2026-70925

The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without independently attesting the version from the device itself. An authenticated attacker could submit arbitrary firmware version strings for their own device, allowing them to...

PT-2026-70897

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP server-side RDSTLS in libfreerdp/core/rdstls.c accepts an attacker-supplied RDSTLS TYPE CAPABILITIES PDU while rdstls server authenticate is waiting for RDSTLS TYPE AUTHREQ, leaving resultCode at RDSTLS RESU...

Windows Package Manager (WinGet) < 1.29.280 Elevation of Privilege (CVE-2026-68821)

The version of Windows Package Manager WinGet installed on the remote host is prior to 1.29.280. It is, therefore, affected by an elevation of privilege vulnerability: - An elevation of privilege vulnerability exists in Windows Package Manager that allows a local attacker with low privileges to...

3-04-2025-ttm (0.1.0), a2 (>=0.10.5, <=0.10.13) +3359 more potentially affected by CVE-2026-69112 via accelerate (>=0.5.1, <=1.14.0)

accelerate PYPI version =0.5.1, =0.10.5, =5.0.0, =5.0.5 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 - aait-store-cut-part-003 0.0.1 - aait-store-cut-part-004 0.0.1 - aait-store-cut-part-005 0.0.1 - aait-store-cut-part-006 0.0.1 - aait-store-cut-part-007 0.0.1 -...

CVE-2026-72906 ERPNext: Unauthorised triggering of automated emails due to missing validation

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, the sendautoemail function in erpnext/accounts/doctype/processstatementofaccounts/processstatementofaccounts.py lacks a Process Statement Of Accounts permission check, allowing an authenticated...

CVE-2026-72904 Firecrawl: Arbitrary file read via JSON Schema $ref expansion

Firecrawl turns entire websites into LLM-ready markdown or structured data. Prior to 2.11.32, a critical arbitrary file read vulnerability exists in Firecrawl's extraction functionality due to unsafe schema dereferencing of user-supplied JSON schemas in...

CVE-2026-72886

creationtimestamp| type| source ---|---|--- 2026-08-10 20:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqwzpb62x2g 2026-08-10 21:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msqymyf7po2t...

CVE-2026-72902

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy allows an authenticated user to execute arbitrary commands on a local or SSH-connected target server because registry.testRegistry and registry.testRegistryById in apps/dokploy/server/api/routers/registry.ts...

CVE-2026-72901

CVE-2026-72901 affects Dokploy before version 0.29.13. An authenticated low-privilege user could run arbitrary commands on the control-plane host due to the volumeName field used by volumeBackup.create/runManually being interpolated without quoting in packages/server/src/utils/volume-backups/back...

CVE-2026-72879 Dokploy: Command Injection via Registry Credentials in Swarm Upload

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.8, the getRegistryCommands function in packages/server/src/utils/cluster/upload.ts interpolates registry.password and registry.registryUrl directly into a shell command without escaping. An authenticated user with project...

CVE-2026-72873 Dokploy: Cross-tenant Git provider secrets are disclosed to low-privileged service readers via `application.one`

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, application.one in apps/dokploy/server/api/routers/application.ts returns provider relations loaded by findApplicationById in packages/server/src/services/application.ts without redacting githubClientSecret,...

CVE-2026-72873

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, application.one in apps/dokploy/server/api/routers/application.ts returns provider relations loaded by findApplicationById in packages/server/src/services/application.ts without redacting githubClientSecret,...

CVE-2026-72873 Dokploy: Cross-tenant Git provider secrets are disclosed to low-privileged service readers via `application.one`

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, application.one in apps/dokploy/server/api/routers/application.ts returns provider relations loaded by findApplicationById in packages/server/src/services/application.ts without redacting githubClientSecret,...

cbtham-feast-az-provider (0.2.299), elemeno-ai-sdk (>=0.0.5, <=0.6.11) +25 more potentially affected by CVE-2026-18941 via feast (>=0.9.3, <=0.65.0)

feast PYPI version =0.9.3, =0.0.5, =0.0.1, =0.1.0, =0.1.0, =0.3.0, =0.1.1, =0.1.0rc3, =0.0.2, =1.0.0, =1.0.0, =0.1.0, =0.4.0 - mlops-ods 0.1.202406281646 and more Source cves: CVE-2026-18941 Source advisory: SNYK:PYTHON-FEAST-18612620...

CVE-2026-72870

Dokploy's buildRemoteDocker vulnerability affects Dokploy before 0.29.13. The buildRemoteDocker() function interpolates the application-controlled dockerImage value directly into a docker pull command, enabling an authenticated user with project access to craft a dockerImage via application.updat...