CVE-2026-115456

A flaw was found in gcc. An attacker could cause a Denial of Service DoS by passing a string that is not null-terminated to the std::fromchars function in the libstdc++ library. This issue triggers an out-of-bounds read beyond the allocated buffer, potentially leading to invalid data parsing or a...

PT-2026-133523

Name of the Vulnerable Software and Affected Versions HTTP::Parser::XS versions prior to 0.18 Description An issue exists in the parse http request function where the XS parser URL-decodes the request path and measures the result using strlen. This causes the PATH INFO variable to be truncated at...

AdminNeo: version-cache array injection causes persistent denial of service

AdminNeo v5.4.1 gets the latest version from GitHub API in a browser JavaScript function. Version number is then sent by POST request to ?script=version. This endpoint lacks origin validation and accepts POST data from any source. An attacker can POST version parameter which PHP converts to an...

OpenWRT uhttpd input validation error vulnerability

OpenWRT uhttpd contains an input validation error vulnerability. This vulnerability arises because the uhubusdatasend function in ubus.c fails to synchronize the HTTP request boundaries when multiple TCP segments of the JSON request body arrive for POST /ubus. As a result, the remaining...

PT-2026-134196

Name of the Vulnerable Software and Affected Versions Tesseract versions prior to 5.5.4 Description The ReadAdaptedClass function in src/classify/adaptive.cpp reads an ADAPT CLASS STRUCT from a pre-adapted-template .a file without neutralizing TempProtos and Config pointer fields before any...

MONAI Project code injection vulnerability

Project MONAI: Versions prior to MONAI 1.6.0 and 1.6.1 contain a code injection vulnerability. This vulnerability stems from improper handling by the auto3dseg algofromjson function of algoobject.json located in a specially crafted working directory, as well as malicious algorithmtemplates module...

GNU GCC buffer error vulnerability

GNU GCC contains a buffer error vulnerability. This vulnerability arises when a string that does not end with a null character is passed to the std::fromchars function in the libstdc++ library, causing an out-of-bounds read of an allocated buffer. This may result in denial of service, invalid dat...

PT-2026-134216

In Trail of Bits fickling through 0.1.12, a pickle STACK GLOBAL operand carrying a dotted qualname for example "Values.read file" is resolved by pickle's find class through getattribute to an arbitrary attribute path rather than to a module-level function. Fickling records only the leading...

CVE-2026-63377: fctr-id okta-ai-agent: TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language

TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, POST /api/auth/setup in src/api/routers/auth.py allows an unauthenticated network attacker to create the first administrator account before the legitimate...

PT-2026-133788

Name of the Vulnerable Software and Affected Versions Pistache versions 0.0.5 through 0.4.26 Description The SegmentTreeNode::sanitizeResource function in src/server/router.cc uses std::regex replace with the //+ expression to collapse consecutive slashes. When using libstdc++, a path containing...

CVE-2026-55098: Basekick-Labs arc: Arc is an open, SQL-native time-series database for telemetry

Arc is an open, SQL-native time-series database for telemetry. Prior to the repository-verified 26.06.2 repair, the remediation of CVE-2026-47735 leaves a cross-database authorization bypass through DuckDB table-valued I/O functions. In internal/database/sandbox.go, alloweddirectories uses...

PT-2026-134415

Summary This vulnerability is a patch bypass that exploits catastrophic backtracking in a regular expression used to filter ATTACH statements in AdminNeo's SQLite functionality. The original vulnerability CVE-2021-43008 allowed authenticated users to create PHP files through SQLite ATTACH...

Google Chrome Microsoft Edge Access Disclosure

The vulnerability in the Navigation function of Google Chrome and Microsoft Edge is related to authorization errors. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information and compromise its integrity by using a specially crafted HTML page...

CVE-2026-16760: trailofbits fickling: In Trail of Bits fickling through 0.1.12, the _process_import() method in fickle.py adds an imported name to the…

In Trail of Bits fickling through 0.1.12, the processimport method in fickle.py adds an imported name to the likelysafeimports set whenever the source module is present in sys.stdlibmodulenames and the name is absent from the UNSAFEIMPORTS denylist, without inspecting what the name resolves to or...

PT-2026-134463

Name of the Vulnerable Software and Affected Versions Popup Builder versions prior to 4.4.6 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. This allows unauthenticated attackers to move all published popup...

PT-2026-133690

The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the setSupportCustomImage function in all versions up to, and including, 5.0.1. This makes it possible for authenticated attackers, wi...

PT-2026-134410

Summary AdminNeo's CSRF protection uses a BREACH-resistant XOR masking scheme, but the implementation transmits both the XOR mask and the masked value in every token. This allows any observer who sees a single CSRF token via network sniffing, log files, Referrer header, or XSS to instantly recove...

PT-2026-133721

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the legacy render function. This is due to broken authorization on the Lightroom gallery edit endpoint combined with mass...

Gravity Forms deserialization injection vulnerability

Gravity Forms versions 3.1.2 and earlier contain a deserialization injection vulnerability. This vulnerability arises because GFFormsModel::createpost passes submission values to WordPress’s global maybeunserialize function instead of using the plugin-validated GFCommon::maybeunserialize. As a...

PT-2026-134439

Name of the Vulnerable Software and Affected Versions PDF Invoices & Packing Slips for WooCommerce versions prior to 5.16.5 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary web scripts through...