PT-2026-111796

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 7.6.0 through 7.6.4 FortiAnalyzer versions 7.4.0 through 7.4.7 FortiAnalyzer version 7.2 FortiAnalyzer Cloud versions 7.6.2 through 7.6.4 FortiAnalyzer Cloud versions 7.4.1 through 7.4.7 FortiAnalyzer Cloud versions 7.2....

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenSSL vulnerabilities (USN-8678-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8678-1 advisory. It was discovered that OpenSSL incorrectly handled the QUIC server incoming channel queue. A remote attacker could possibly use...

PT-2026-111799

Name of the Vulnerable Software and Affected Versions jfrog-cli versions prior to 2.126.1 Description Improper sanitization of user-controlled arguments passed to underlying command execution allows for argument injection. Under specific configurations, this can lead to arbitrary code execution o...

CVE-2026-104342: Use After Free

Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-104341: Out-of-bounds Write

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

ALSA-2026:82015 Important: xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests...

PT-2026-111818

Name of the Vulnerable Software and Affected Versions Shopware version 6.7 Description Shopware allows the upload of attacker-controlled HTML files which are served as text/html without effective security headers, such as Content-Security-Policy or X-Content-Type-Options: nosniff. This leads to...

CVE-2026-103835: Out-of-bounds Write

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-108381: Improper Control of Generation of Code

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.44.0 through 0.70.5, the Pydantic and AvroDantic model generators insert a schema field's pydantic-class value after pydantic. in a...

PT-2026-113325

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager affected versions not specified Description An Incorrect Authorization issue allows for arbitrary code execution within the context of the current user. This could enable an attacker to gain elevated access or control...

Important: libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and...

PT-2026-111568

Name of the Vulnerable Software and Affected Versions Wazuh versions 3.9.0 through 4.14.7 Description An arbitrary file overwrite issue exists in the MasterHandler.process files from worker function. A compromised cluster worker can bypass protections using a trailing-slash basename bypass and th...

APSB26-158 : Security update available for Adobe Photoshop

Adobe has released a priority 3 security update for Adobe Photoshop. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution and application denial-of-service. Adobe is not aware of any exploits in the wild for any of the issues addressed in this...

APSB26-171 : Security update available for Adobe Dimension

Adobe has released a priority 3 security update for Adobe Dimension. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution, application denial-of-service, and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues...

APSB26-170 : Security update available for Adobe Substance 3D Stager

Adobe has released a priority 3 security update for Adobe Substance 3D Stager. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution, memory exposure, and application denial-of-service. Adobe is not aware of any exploits in the wild for any of t...

APSB26-144 : Security update available for Adobe ColdFusion

Adobe has released a priority 2 security update for Adobe ColdFusion. This update addresses vulnerabilities rated critical and high that could result in arbitrary code execution, security feature bypass, arbitrary file system write, privilege escalation, arbitrary file system read, application...

APSB26-159 : Security update available for Adobe Substance 3D Sampler

Adobe has released a priority 3 security update for Adobe Substance 3D Sampler. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues addressed in this...

APSB26-152 : Security update available for Adobe Experience Manager

Adobe has released a priority 2 security update for Adobe Experience Manager. This update addresses vulnerabilities rated critical and medium that could result in arbitrary code execution, security feature bypass, and privilege escalation. Adobe is not aware of any exploits in the wild for any of...

APSB26-167 : Security update available for Adobe Bridge

Adobe has released a priority 3 security update for Adobe Bridge. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues addressed in this update...

KLA91334 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microso...