PT-2026-111973

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free issue in the HID class driver allows an unauthorized attacker to elevate privileges. This occurs during a physical attack, where the attacker can manipulate the system to gai...

CVE-2026-108467: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network...

PT-2026-111275

Name of the Vulnerable Software and Affected Versions storyicon comfyui segment anything versions up to ab6395596399d5048639cdab7e44ec9fae857a93 Description Code injection is possible via remote attack in the GroundingDINO Model Loading component. The issue exists within the SLConfig. file2dict...

Microsoft Windows: CVE-2026-96916: Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

PT-2026-112014

Name of the Vulnerable Software and Affected Versions Windows Backup Engine affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the...

CVE-2026-70197

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-108941

The Linketic CityGaussian software (versions up to 2.0 ) contains a code injection vulnerability within the Sidecar Parsing component. Specifically, the parse_cfg_args function in the internal/utils/common.py file is susceptible to exploitation because the manipulation of the cfg_args argument al...

CVE-2026-108941 Linketic CityGaussian Sidecar Parsing common.py parse_cfg_args code injection

A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parsecfgargs of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfgargs leads to code injection. The attack can only be performed from a local...

CVE-2026-108940 EricLBuehler Mistral.rs handlers.rs calibration_apply path traversal

A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibrationapply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument savecimatrix results in path traversal. The attack may be initiated remotely. The...

CVE-2026-108940 EricLBuehler Mistral.rs handlers.rs calibration_apply path traversal

A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibrationapply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument savecimatrix results in path traversal. The attack may be initiated remotely. The...

CVE-2026-17484 IBM i is Information Disclosure

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control...

CVE-2026-17487 IBM i is Information Disclosure

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process...

CVE-2026-18318

IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to an information disclosure issue in Dedicated Service Tools (DST) / System Service Tools (SST) . Due to improper authentication (CWE-307), a remote attacker could perform brute-force attacks to obtain credentials. The vulnerability has a CVSS...

CVE-2026-18343

IBM i versions 7.3, 7.4, 7.5, and 7.6 (all 5770-SS1) are vulnerable to an Improper Privilege Management vulnerability (CWE-269 ). This flaw allows a local attacker to modify the BOOTP table due to insufficient authorization. The vulnerability carries a CVSS v3.1 base score of 4.4. Remediation is ...

CVE-2026-18343 IBM i is Affected By An Improper Privilege Management Vulnerability

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization...

CVE-2026-92832

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information...

CVE-2026-75782

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable...

CVE-2026-75061

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to write arbitrary files on the system...

CVE-2026-109663

Frappe ERPNext before 15.113.0 and 16.x before 16.22.0 contains an SQL injection vulnerability caused by missing input validation in some endpoints. Authenticated remote attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive informati...

CVE-2026-108939 EricLBuehler mistral.rs media_source.rs is_global_ip server-side request forgery

A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function isglobalip of the file mistralrs-server-core/src/mediasource.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been...