PT-2026-111093

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics versions 2.0 through 2.1 Description Improper validation of file paths allows a remote attacker to read arbitrary host files and overwrite specific application files. Recommendations At the moment, there is no informatio...

PT-2026-111091

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics versions 2.0 through 2.1 Description Improper authentication may allow a remote attacker to gain unauthorized administrative access. Recommendations At the moment, there is no information about a newer version that...

PT-2026-111098

Name of the Vulnerable Software and Affected Versions IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 Description A local attacker can obtain sensitive information because a service account has been assigned excessive permissions. Recommendations At the moment, there is no information...

PT-2026-110909

Name of the Vulnerable Software and Affected Versions itsourcecode Baptism Information Management System version 1.0 Description A SQL injection flaw exists in the pbaptism.php file. This issue occurs when the b id argument is manipulated, allowing a remote attacker to execute arbitrary SQL...

PT-2026-110910

Name of the Vulnerable Software and Affected Versions itsourcecode Online Admission System version 1.0 Description An issue exists in the processing of the /admin/sum.php endpoint. Remote manipulation of the ID argument allows for SQL injection, a technique where malicious SQL statements are...

PT-2026-110981

Name of the Vulnerable Software and Affected Versions Edimax BR-6208AC version 1.32 Description A remote cross site scripting issue exists in the /goform/formFilter file. This occurs when an unknown function within that file fails to properly handle input, allowing an attacker to execute maliciou...

PT-2026-111087

Name of the Vulnerable Software and Affected Versions Frappe ERPNext versions prior to 15.98.0 Frappe ERPNext versions 16.x prior to 16.6.0 Description Missing input validation in certain endpoints allows remote authenticated attackers to perform SQL injection. By sending specially crafted...

PT-2026-111116

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control...

PT-2026-111110

A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function is global ip of the file mistralrs-server-core/src/media source.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been...

PT-2026-111119

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization...

PT-2026-110888

Name of the Vulnerable Software and Affected Versions Temporal Server affected versions not specified Description An issue exists where internal completion callbacks are not bound to the namespace that attached them. This allows an authenticated caller with write permissions in one namespace to...

PT-2026-110897

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.5 Description Improper input validation may allow a local attacker to cause a denial of service. Recommendations At the moment, there is no information about a newer...

PT-2026-110877

A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/user record.php of the component Admin Record Tables. Such manipulation of the argument name/email leads to cross site scripting. The attack can be...

PT-2026-110873

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.5 Description Improper privilege management in IBM Db2 for Linux, UNIX, and Windows, including DB2 Connect Server, could allow a local attacker to gain elevated...

PT-2026-110798

A security flaw has been discovered in Netcore NR268 1.7.121109. Affected by this issue is some unknown functionality of the component CGI Endpoint. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public a...

PT-2026-110858

Name of the Vulnerable Software and Affected Versions Edimax BR-6208AC version 1.32 Description Remote command injection is possible due to improper processing of the /goform/formAutoFWupgrade endpoint. An attacker can execute arbitrary commands by manipulating the tftpsIP argument. Recommendatio...

PT-2026-110797

Name of the Vulnerable Software and Affected Versions Netcore NR268 version 1.7.121109 Description Cross site scripting occurs in the Web UI component due to improper handling of the title, note, URL, and content arguments within the eval function of the '/router/l7 call board user set.cgi'...

PT-2026-110738

Grav Login OAuth plugin grav-plugin-login-oauth before 1.4.3 provisions OAuth accounts as ordinary Grav users with a deterministic . username and an unsalted MD5 hash of the provider identifier as the password, without disabling password login. Unauthenticated remote attackers who learn or guess ...

PT-2026-110747

Network-AI 5.0.0 before 5.15.2 contains a cross-site WebSocket hijacking vulnerability in DashboardServer that allows remote attackers to read live agent topology because handleUpgrade performs no Origin or token validation. Attackers can lure a victim running the dashboard to a malicious page th...

PT-2026-110800

🚨 CVE-2026-85963 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 include deprecated OpsDirector functionality with weaknesses that could allow an unauthenticated remote attacker to make unauthorized requests to internal services or forge trusted requests,...