PT-2026-97422

Name of the Vulnerable Software and Affected Versions FileMaker Server versions prior to 26.0.3 Description A heap buffer overflow occurs in the database engine block parsing routine. This issue allows a maliciously crafted .fmp12 database file to cause memory corruption, which could potentially...

PT-2026-97540

Name of the Vulnerable Software and Affected Versions Ansible Automation Platform automation-controller affected versions not specified Description A flaw exists in the custom Credential Type environment-variable injector. The system validates variable names using a deny-list consisting of an...

PT-2026-97387

Name of the Vulnerable Software and Affected Versions Moodle Socialwall plugin versions 3.0 through 3.3 Description A SQL injection flaw allows an attacker to execute arbitrary code by sending specially crafted HTTP requests. SQL injection is a technique where malicious SQL statements are inserte...

PT-2026-97596

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description A remote authenticated attacker can execute arbitrary code due to improper escaping of connector property values during the generation of OSH Orchestrate Shell scripts...

ROS-20260923-73-0001

The vulnerability of the services/repository/files/patch.go file in the Git repository management system Gitea is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain unauthorized access to protected information...

CVE-2026-75131: Improper Neutralization of Argument Delimiters in a Command

NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains a privilege escalation vulnerability that allows local users with permission to create VPN connections to execute arbitrary code as root by injecting pppd options through a crafted VPN username. Attackers can embed a double-quote...

PT-2026-97220

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A path traversal issue exists in the handling of embedded PDF resources. Insufficient validation of resource file paths allows files to be written outside their intended...

Foxit Reader Array resetForm Use-After-Free Vulnerability

Summary A use-after-free vulnerability exists in the way Foxit Reader handles an Array object. A specially crafted JavaScript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick...

Linux Distros Unpatched Vulnerability : CVE-2026-91724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute...

Linux Distros Unpatched Vulnerability : CVE-2026-91709

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTM...

PT-2026-97206

Name of the Vulnerable Software and Affected Versions Acer NitroSense versions prior to 5.2.64 Description An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed on localhost TCP port 9993. This occurs because Chromium remote debugging is enabled within the...

PT-2026-97571

OS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privileges...

PT-2026-97570

An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute arbitrary code as root via the "Plesk RESTful API" extension from 2.4.2 before 2.4.7...

PT-2026-97270

The GTranslate WordPress plugin before 5.0.1 does not remove shortcodes from the content of outgoing emails before expanding them which, in a non-default configuration, allows unauthenticated users to have arbitrary shortcodes registered on the site executed server side...

PT-2026-97218

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description An issue exists in the handling of JavaScript array objects. A specially crafted PDF can trigger a use-after-free condition—where the application continues to use a memory...

PT-2026-97214

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description The FileOpen plugin fails to properly validate encryption metadata within specially crafted PDF files. This flaw can leave an internal pointer in an invalid state, leading to...

PT-2026-97610

Name of the Vulnerable Software and Affected Versions Microsoft Outlook affected versions not specified Description A remote code execution issue exists in Microsoft Outlook. This flaw allows an attacker to execute arbitrary code on the target system. Recommendations Apply the September updates t...

PT-2026-97305

Name of the Vulnerable Software and Affected Versions ZohoCorp ManageEngine OpManager MSP versions 12.8.709 and earlier Description A Remote Code Execution issue exists within the Notification Profile module, which could allow an attacker to execute arbitrary code on the server. Recommendations...

PT-2026-97232

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A race condition exists in the update mechanism of Foxit PDF Editor/Reader. Due to insufficient file locking and integrity validation, an update package can be replaced by a...

PT-2026-97127

Name of the Vulnerable Software and Affected Versions recommenders-team recommenders versions prior to 1.2.2 Description A flaw in the Dict Loading component allows remote attackers to trigger deserialization. This occurs through the pickle.load function within the...