PT-2026-110466

Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications...

PT-2026-110451

Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock...

PT-2026-110445

Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information...

PT-2026-110448

Name of the Vulnerable Software and Affected Versions WSM service versions prior to SMR Oct-2026 Release 1 Description A use after free issue exists in the WSM service. This flaw allows local attackers to potentially execute arbitrary code with system privileges. Use after free is a memory...

PT-2026-110464

Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process...

PT-2026-110461

Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data...

PT-2026-110443

Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory...

PT-2026-110439

A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of the file Admin/Home/Controller/PublicController.class.php of the component Password Recovery Mail Endpoint. This manipulation of the argument...

PT-2026-110446

Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage...

PT-2026-110450

Name of the Vulnerable Software and Affected Versions libsamsungtts.so versions prior to SMR Oct-2026 Release 1 Description An out-of-bounds write exists in the libsamsungtts.so library, which allows local attackers to execute arbitrary code. An out-of-bounds write occurs when a program writes da...

PT-2026-110453

Name of the Vulnerable Software and Affected Versions libsimba.heifdec.media.samsung.so versions prior to SMR Oct-2026 Release 1 Description Improper input validation occurs during the parsing of sheifd, which may allow a local attacker to execute arbitrary code. Recommendations Update...

PT-2026-110456

Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges...

PT-2026-110459

Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device...

PT-2026-110455

Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data...

PT-2026-110494

Name of the Vulnerable Software and Affected Versions tsi-coop tsi-dpdp-cms versions 0.5.0 through 0.5.2 Description A flaw in the JSON Schema Validation component allows remote information disclosure. This occurs through the manipulation of the func argument. Recommendations Upgrade tsi-coop...

PT-2026-110481

A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function mysql query of the file source/adminregister.php of the component Registration Handler. Performing a manipulation results in sql injection. The attack may be...

PT-2026-110636

A vulnerability has been found in Netcore NR268 1.7.121109. This affects the function filter arp put file cgi of the file /router/filter arp put file.cgi. The manipulation of the argument put file leads to out-of-bounds read. It is possible to initiate the attack remotely. The exploit has been...

PT-2026-110634

Name of the Vulnerable Software and Affected Versions Exponent CMS versions prior to 3.0.2patch3 Description An issue exists in the XML-RPC component within the userLogin function of the xmlrpc.php file. This flaw allows a remote attacker to perform SQL injection, which is a technique used to...

PT-2026-110511

Name of the Vulnerable Software and Affected Versions agno-agi agno versions prior to 3.0.7 Description Remote code injection is possible within the PythonTools component in the file python.py. The issue occurs when the code argument passed to the run python code function is manipulated, allowing...

PT-2026-110537

A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zen db perform in the library includes/modules/payment/paypaldp.php of the component PayPal IPN Handler. Performing a manipulation of the argument txn id results in sql injection. The attack can be initiated remotely. Th...