PT-2026-84329

Name of the Vulnerable Software and Affected Versions NVIDIA Megatron Bridge affected versions not specified Description An issue exists where an attacker could cause a deserialization of untrusted data. Deserialization is the process of converting a data format back into an object. A successful...

PT-2026-84411

Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description Privilege escalation flaws exist in the API of the platform. An authenticated user with low privilege operator permissions can perform state-changing actions that excee...

PT-2026-84473

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A privilege escalation issue exists in the API endpoint of AOS-CX. An authenticated user with low-privilege operator permissions can access sensitive information from the system, provided a...

PT-2026-84412

Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description A business logic vulnerability exists in the API of HPE Networking Fabric Composer. This flaw allows an authenticated user with low privilege operator permissions to...

PT-2026-84240

Name of the Vulnerable Software and Affected Versions TOTOLINK T6 version 4.1.5cu.748 B20211015 Description Incorrect access control in the informSyncUpgfw function allows unauthenticated attackers to mass-trigger firmware update activity across mesh slaves. This is achieved by sending a crafted...

PT-2026-84247

Name of the Vulnerable Software and Affected Versions Dell PowerStore affected versions not specified Description An OS Command Injection issue exists where an authenticated user with limited privileges can execute arbitrary commands with root privileges. OS Command Injection is a flaw that allow...

Using LLMs to Elicit Security Requirements for Service-Oriented Cyber Ranges

Cyber ranges are complex environments comprising many interacting components and stakeholders with different security concerns. The Service-Oriented Cyber Range SOR is no exception, particularly when it comes to training scenarios targeting critical infrastructure. Security concerns are translate...

PT-2026-84425

Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description Authenticated remote attackers can perform SQL injection attacks against the API of the HPE Networking Fabric Composer. This flaw allows the attacker to retrieve and...

PT-2026-84494

Name of the Vulnerable Software and Affected Versions AOS-CX switches affected versions not specified Description An issue exists in the API endpoint of AOS-CX switches that may allow an unauthenticated remote actor to bypass authentication controls. Recommendations At the moment, there is no...

PT-2026-84468

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Issues in the authentication module may lead to the improper processing of malformed or truncated input. An authenticated remote attacker can exploit this by...

TencentOS Server 4: moby (TSSA-2026:0872)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0872 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

PT-2026-84407

Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description A stored cross-site scripting XSS issue exists in the web-based management interface. This allows an unauthenticated adjacent attacker to execute arbitrary script code ...

PT-2026-84539

Name of the Vulnerable Software and Affected Versions WWBN AVideo affected versions not specified Description Insufficient validation of password recovery token expiration occurs in the 'userRecoverPassSave.json.php' endpoint. This allows an attacker who has obtained a recovery token to use it...

PT-2026-84526

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 140.15 Thunderbird versions prior to 153.2 Thunderbird versions prior to 155 Description A maliciously constructed mail header can cause a one byte read past the end of a buffer, which is a memory safety issue whe...

ROS-20260901-73-0020

The vulnerabilities of the IndexFile.fromtree, IndexFile.reset, and IndexFile.mergetree methods in the GitPython library for interacting with git repositories involve the exploitation of arguments. Exploiting these vulnerabilities can allow a malicious actor to rewrite any files at will...

HPESBNW05133 rev.1 - Multiple Vulnerabilities in HPE Aruba Networking Fabric Composer

Potential Security Impact: Remote: Access Restriction Bypass, Authentication Bypass, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Fabric Composer AFC 7.3.3 and below CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2026-766...

PT-2026-84475

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A flaw in the web-based management interface allows an authenticated remote attacker to perform a server-side request forgery SSRF attack. SSRF is a technique where an attacker induces a...

KLA91248 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1...

KLA91254 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Denia...

KLA91252 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Security vulnerability in the Remote Settings Client...