Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from access control issues and insufficient sandbox restrictions, potentially allowing...

vLLM configuration error vulnerability

Versions of vLLM prior to 0.32.0 contain a configuration error vulnerability. This vulnerability arises because OpenAI-compatible servers by default set allowedorigins for Starlette CORSMiddleware to a wildcard value. As a result, malicious web pages can exploit this flaw, allowing victims’...

Syncplify Server path traversal vulnerability

Versions prior to Syncplify Server 8.8.0 contain a path traversal vulnerability. This vulnerability stems from an access control bypass, allowing authenticated SFTP users to exploit case-insensitive file system path resolution and the 8.3 short filename feature to bypass per-path permissions. As ...

HeyCyan permission and access control issues vulnerability

The HeyCyan 1.0.103 version contains a vulnerability related to permission and access control issues. This flaw stems from improper access control in the FileProvider component, potentially allowing remote attackers to gain unauthorized access...

CVE-2026-116638

The Windows Recovery Environment WinRE in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to...

EUVD-2026-110069

The Windows Recovery Environment WinRE in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to...

CVE-2026-116638

The Windows Recovery Environment WinRE in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to...

WordPress LearnPress authorization issue vulnerability

WordPress LearnPress versions 4.4.11 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks, which may allow attackers to exploit improperly configured access control levels...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27, and Apple iPadOS versions prior to 27. This vulnerability stems from insufficient permission checks and may allow applications to access sensitive user dat...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2 and Apple iPadOS versions prior to 27.2. This vulnerability stems from an authorization issue and may allow remote attackers to access sensitive user data...

Google Chrome Microsoft Edge CORS

The CORS component vulnerability in Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

WordPress Geo Mashup authorization issue vulnerability

WordPress Geo Mashup versions 1.13.22 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks and may lead to exploitation of improperly configured access control levels...

PT-2026-123381

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.113 Linux kernel versions prior to 6.18.57 Description An out-of-bounds access issue exists in the btintel pcie Bluetooth driver. The btintel pcie prepare tx function uses the tfd index variable to access th...

ROS-20261026-73-0071

The vulnerability in openssh is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Wolfvision Cynap authorization issue vulnerability

The Wolfvision Cynap has an authorization issue vulnerability. This vulnerability stems from access control problems in the web server configuration. Certain resources intended for local use on devices can be accessed remotely by attackers who lack authentication but possess a web interface; this...

PT-2026-123279

Name of the Vulnerable Software and Affected Versions Mendix SAML Mendix 10 compatible versions prior to 4.2.4 Mendix SAML Mendix 11 compatible versions prior to 4.2.4 Mendix SAML Mendix 9 compatible versions prior to 3.6.29 Description The module fails to properly protect against SAML assertion...

PT-2026-123347

TTLock Android application before v9.8.260718 and associated smart-lock firmware contain a hardcoded static AES key vulnerability that allows an attacker within Bluetooth range to decrypt the per-pairing session key transmitted during BLE pairing. Attackers can observe the pairing exchange, recov...

ROS-20261026-73-0115

The vulnerability in openssh is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, and Apple macOS Golden Gate versions prior to 27.2. This vulnerability stems from improper input validation and may allow applications to access sensitive user data...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, and Apple visionOS versions prior to 27.2. This vulnerability stems from improper access control and may allow malicious applications to access...