PT-2026-111982

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

PT-2026-111985

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

PT-2026-111986

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

PT-2026-112715

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description An unauthorized attacker can disclose information over a network due to the use of an uninitialized resource within the Windows Routing and Remote Acces...

PT-2026-112709

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description A use after free issue in the Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally. Use after free...

PT-2026-112728

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description A Remote Code Execution issue in the Windows Routing and Remote Access Service RRAS allows an attacker to gain unauthorized access to a victim's machine...

PT-2026-111800

Name of the Vulnerable Software and Affected Versions Adobe Commerce affected versions not specified Description Improper neutralization of special elements used in a template engine allows for arbitrary code execution in the context of the current user. This can lead to elevated access or full...

PT-2026-113348

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager affected versions not specified Description An Incorrect Authorization issue allows for arbitrary code execution within the context of the current user. This could enable an attacker to gain elevated access or control...

CVE-2024-34323

ProPhoenix Law RMS v2022.2403.3.101 is vulnerable to an Insecure Direct Object Reference (IDOR) via the usrLogin$hdnPFID parameter. This flaw allows an attacker to perform a crafted HTTP request to gain unauthorized access to sensitive information . The vulnerability is associated with CWE-639 (A...

PT-2026-111742

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...

PT-2026-113517

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...

CVE-2026-52394

The DeepSeek V4 model is vulnerable to Incorrect Access Control when processing a crafted input. While specific internal component details or root cause files are not provided in the documents, the vulnerability allows for unauthorized access. Based on the SSVC metrics, the issue is considered au...

PT-2026-111783

Name of the Vulnerable Software and Affected Versions Fortinet FortiSIEM version 7.5.0 Description An improper limitation of a pathname to a restricted directory, known as path traversal, allows an attacker to execute unauthorized code or commands by sending specially crafted packets...

PT-2026-113509

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's...

PT-2026-113512

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...

PT-2026-113514

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...

PT-2026-113519

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...

PT-2026-113524

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user...

PT-2026-113525

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue...

PT-2026-113527

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does no...