PT-2026-101578

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-1029: Improper Neutralization of Input During Web Page Generation

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

Oracle Analytics Server (OAS 8.2) (September 2026 CSPU)

The version of Oracle Analytics Server 8.2.0.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory. - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Web...

The vulnerability of the REST API web interface component based on artificial intelligence allows a hacker to induce a service failure.

The vulnerability of the REST API web interface component based on artificial intelligence is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

CVE-2026-84074: Improper Neutralization of Input During Web Page Generation

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...

CVE-2026-14323: Improper Limitation of a Pathname to a Restricted Directory

The Printcart Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.8.5 via the 'mockups' parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server...

CVE-2026-82832: Improper Neutralization of Input During Web Page Generation

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...

CVE-2026-81945: Stack-based Buffer Overflow

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote administrator to cause a denial of service o...

CVE-2026-84108: Improper Neutralization of Input During Web Page Generation

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of input during web page generation...

PT-2026-95666

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Remote authenticated attackers can execute arbitrary JavaScript code due to improper neutralization of input during web page generation. This issue is a Cross-Site Scripting XSS flaw, which...

CVE-2026-84031: Improper Neutralization of Input During Web Page Generation

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...

PT-2026-100128

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-93371: Improper Neutralization of Special Elements used in a Command

A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...

PT-2026-101035

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-81942: Improper Neutralization of Special Elements used in an OS Command

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system without sufficient filtering, allowing a remote authenticated attacker to...

PT-2026-95225

Name of the Vulnerable Software and Affected Versions marcopiovanello yt-dlp-web-ui versions prior to v5 Description Remote command injection is possible through the manipulation of the params argument within the NewGenericDownload function located in the server/internal/downloaders/generic.go...

PT-2026-95631

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Remote authenticated attackers can execute arbitrary code due to improper neutralization of input during web page generation. Recommendations Apply the available patch for version 12.2...

PT-2026-96729

Name of the Vulnerable Software and Affected Versions D-Link DAP-1360 versions 6.14 and earlier Description An unauthenticated remote code execution issue exists in the web management interface. Remote attackers can execute arbitrary commands with root privileges by sending crafted HTTP requests ...

PT-2026-95691

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Remote authenticated attackers can execute arbitrary code due to improper neutralization of input during web page generation. Recommendations At the moment, there is no information about a...

PT-2026-95671

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Remote authenticated attackers can execute arbitrary code due to improper neutralization of input during the process of web page generation. Recommendations At the moment, there is no...