TencentOS Server 4: python-pillow (TSSA-2026:1206)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1206 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Pillow TiffDecode Heap Buffer Overflow DoS

The vulnerability in the tiffWriteProc function within src/lib Imaging/TiffDecode.c of the Pillow image processing library is related to buffer overflows in memory during TIFF image processing. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service, disclose...

(0Day) (Pwn2Own) Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the framework service. The issue results from an exposed dangerous...

(0Day) (Pwn2Own) Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exis...

(0Day) (Pwn2Own) Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific...

Spring AI 2.1 Message Parts: Reasoning That Survives the Round Trip

Spring AI: Message Parts Doc | Upgrade Notes | OpenAI Responses Doc | Session Doc Reasoning models do more than think before they answer. They hand part of that thinking back to you and expect to get it back on the next request. Claude signs its thinking blocks. Gemini attaches thought signatures...

PT-2026-129187

Name of the Vulnerable Software and Affected Versions @graphql-tools/executor-legacy-ws versions prior to 1.1.36 Description In the buildWSLegacyExecutor function, the software reuses a single WebSocket and replaces its websocket.onmessage handler whenever a new overlapping subscription starts. T...

(0Day) Ultralytics parse_model Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsemodel functio...

(0Day) Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the torchsafeload...

(0Day) Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the checkdetdataset...

(0Day) Ultralytics parse_model Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsemodel functio...

(0Day) Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the loaddatasetcachefi...

(0Day) Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the torchload function...

October 28, 2026—KB5127653 (OS Builds 28000.3365) Preview

October 28, 2026—KB5127653 OS Builds 28000.3365 Preview Applies To Windows 11 version 26H1, all editions This cumulative update for Windows 11, version 26H1 KB5127653, includes production-quality improvements. Announcements and messages This section provides key notifications related to this...

October 28, 2026 — KB5127936 (OS Builds 26300.9818 and 26200.9818) Preview

October 28, 2026 — KB5127936 OS Builds 26300.9818 and 26200.9818 Preview Applies To Windows 11 version 26H2, all editions Windows 11 version 25H2, all editions This cumulative update for Windows 11, versions 26H2 and 25H2 KB5127936, includes production-quality improvements. Announcements and...

PT-2026-129084

Name of the Vulnerable Software and Affected Versions MIME::Words versions prior to 5.521 Description A memory exhaustion issue exists in the decode mimewords function. When the function encounters repeated "=?" sequences that do not start a complete encoded word, it appends an error message...

Microsoft Windows TCPIP.SYS IppQualifyAddresses Out-of-Bounds Read Vulnerability

Summary An out-of-bounds read vulnerability exists in the IppQualifyAddresses function of the Microsoft Windows tcpip.sys driver. A specially crafted I/O request packet IRP can cause an arbitrary out-of-bounds read, potentially leading to information disclosure or a denial-of-service condition...

PT-2026-128320

Alpine iLX-F511 prh sdp service search decode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a...

PT-2026-130623

Name of the Vulnerable Software and Affected Versions Bot for Telegram on WooCommerce versions prior to 1.3.1 Description An authentication bypass exists that allows unauthenticated attackers to take over any account, including administrators, using only a username. The issue occurs because the...

PT-2026-129184

Name of the Vulnerable Software and Affected Versions @hono/node-server versions 1.19.10 through 2.1.2 Description The serveStatic function decodes the request path a second time after the application has already decoded it for routing. A malformed percent-encoded sequence can cause the route...