PT-2026-64897

The lack of cryptographic mechanisms to ensure the integrity and authenticity of communications in Ghost Robotics' Vision 60 robot APK v5.5.0 exposes the system to man-in-the-middle attacks. An attacker located on the local network can use ARP spoofing and selective traffic blocking techniques to...

CVE-2026-51564

Milk admin ≤0.9.8 is affected by an open redirect via the redirect parameter. A crafted request can redirect users to arbitrary external URLs. Root cause: improper handling of the redirect parameter in Milk admin. Impact: potential user redirection with network access implications; CVSS v3.1 base...

PT-2026-65015

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-64985

A use-after-free UAF vulnerability was discovered in the core parsing component of SQLite 3.41. The flaw occurs because the program frees an ExprList object via sqlite3ExprListDelete and then subsequently accesses the dangling pointer of the released object. A remote adversary can supply speciall...

PT-2026-65004

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

PT-2026-65008

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

PT-2026-65003

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-65019

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

EUVD-2026-49354

A use-after-free vulnerability exists in the expression parsing and memory management logic of SQLite 3.41. After invoking sqlite3ExprDelete to release an expression object, the program still retains the dangling pointer and subsequently accesses member fields of the already freed memory. By...

PT-2026-65033

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

PT-2026-65028

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network...

PT-2026-65031

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-65022

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network...

MiracleLinux 9 : postgresql:18 (AXSA:2026-1357:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1357:01 advisory. postgresql: PostgreSQL: Operating system account hijack via symlink following in pgbasebackup and pgrewind CVE-2026-6475 postgresql: PostgreSQL libp...

CVE-2026-61094

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily...

CVE-2026-57978

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-57978

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module

A vulnerability in the NGINX ngxhttpslicemodule allows remote, unauthenticated attackers to access uninitialized memory via crafted requests. If configured with unnamed regex captures or background cache updates, this flaw can result in limited memory disclosure or a denial-of-service crash...

EUVD-2026-49049

A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of the component addmcpserver. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been...

CVE-2026-17433

CVE-2026-17433 affects nanocoai NanoClaw up to v2.0.64 in MCP Server Approval, specifically the createChatSdkBridge.setup function in src/channels/chat-sdk-bridge.ts. Root cause: improper authorization due to manipulation of the function. Local attack vector; exploit publicly available. The provi...