PT-2026-125430

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data...

PT-2026-123341

Name of the Vulnerable Software and Affected Versions WolfProt affected versions not specified Description Insufficient neutralization of user-controlled input in the interface implementation allows an unauthenticated attacker with network access to execute operating-system commands with the...

PT-2026-123279

Name of the Vulnerable Software and Affected Versions Mendix SAML Mendix 10 compatible versions prior to 4.2.4 Mendix SAML Mendix 11 compatible versions prior to 4.2.4 Mendix SAML Mendix 9 compatible versions prior to 3.6.29 Description The module fails to properly protect against SAML assertion...

PT-2026-123164

Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application may be tampered with, resulting in arbitrary code execution...

PT-2026-123200

Missing Authorization vulnerability in VillaTheme DEPART depart-deposit-and-part-payment-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DEPART: from n/a through 1.0.10...

PT-2026-123284

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.120 before 6.4.122...

PT-2026-123248

Missing Authorization vulnerability in VillaTheme Bopo – WooCommerce Product Bundle Builder bopo-woo-product-bundle-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bopo – WooCommerce Product Bundle Builder: from n/a through 1.2.3...

WordPress Royal Addons for Elementor authorization issue vulnerability

WordPress Royal Addons for Elementor versions 1.7.1069 and earlier contain an authorization issue vulnerability. This vulnerability stems from improper access control configurations, allowing attackers to bypass authorization using keys controlled by users, potentially leading to unauthorized...

Apple Security Advisory 10-26-2026-4

Apple Security Advisory 10-26-2026-4 - macOS Golden Gate 27.2 addresses out of bounds access, out of bounds read, out of bounds write, use-after-free, memory corruption, buffer overflow, integer overflow, arbitrary code execution, and information disclosure vulnerabilities...

GStreamer processing logic error vulnerability

Versions of GStreamer Editing Services prior to 1.28.8 contain a logic error vulnerability. This vulnerability arises because GES project files can embed arbitrary GStreamer pipeline descriptions as effect definitions. During loading, there is no restriction on the elements and attributes that ca...

PT-2026-125346

A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to access sensitive user data...

PT-2026-125274

An authorization issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data...

Vulnerability related to Apache Camel session mechanism issues

Versions of Apache Camel prior to 4.16.0 and between 4.18.5 and 4.19.0, as well as versions between 4.22.2 and 4.23.0, contain a session mechanism vulnerability. This vulnerability arises when token introspection is enabled; Keycloak Security Policy caches the results of such introspection withou...

icret EasyImages permission and access control issue vulnerability

icret EasyImages versions 2.8.7 and earlier contain a vulnerability related to permission escalation and access control. This issue stems from improper handling of the hash parameter in the file app/del.php, potentially leading to improper permission management and allowing remote attackers to...

ROS-20261026-73-0115

The vulnerability in openssh is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20261026-73-0022

The vulnerability in openssh is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20261026-73-0121

The vulnerability in openssh is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20261026-73-0025

The vulnerability in openssh is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, and Apple visionOS versions prior to 27.2. This vulnerability stems from improper access control and may allow malicious applications to access...

PT-2026-125445

An access issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A malicious app may be able to access restricted system interfaces or launder launch attribution...