PT-2026-111388

A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...

PT-2026-111525

A flaw has been found in HBAI-Ltd Toonflow-app up to 1.1.8. The affected element is the function child process.exec of the file src/routes/setting/fileManagement/openFolder.ts of the component Open Folder Endpoint. Executing a manipulation of the argument path can lead to command injection. The...

PT-2026-111311

Name of the Vulnerable Software and Affected Versions Wavlink WL-WN592AX6 version 250422 Description A flaw in the wmapd Daemon allows for remote OS command injection. The issue resides within the system function, enabling an attacker to execute arbitrary operating system commands without...

PT-2026-111327

Name of the Vulnerable Software and Affected Versions AdithyaYelloju Restaurant-Management-System affected versions not specified Description An authorization bypass exists in the Order Management component. A remote attacker can manipulate the ID argument within the mysqli query function to bypa...

PT-2026-111312

A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This vulnerability affects unknown code of the file User/login.php of the component Login Form. Such manipulation of the argument email/passwd leads to improper...

PT-2026-111657

Name of the Vulnerable Software and Affected Versions HBAI-Ltd Toonflow-app versions prior to 2.0.0 Description A flaw in the exportData endpoint allows for information disclosure. This issue requires local access to be exploited. Recommendations Upgrade to version 2.0.0 or later...

PT-2026-111418

A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no particularly sensitive information is affected...

PT-2026-111676

Name of the Vulnerable Software and Affected Versions SourceCodester Online Exam System version 1.0 Description An issue exists in the Login Endpoint within the file adminpanel/admin/query/loginExe.php. Remote manipulation of the username and pass arguments allows for SQL injection, a technique...

PT-2026-113337

Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known session identifier in a victim's browser prior to login. Attackers can exploit the application's failure to regenerate the session id...

PT-2026-112040

Name of the Vulnerable Software and Affected Versions Windows UEFI affected versions not specified Description Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally. This issue specifically affects the UEFI Secure Boot security...

PT-2026-112024

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue in the Windows Kernel allows an authorized attacker to locally disclose sensitive system information to an unauthorized control sphere. Recommendations At the moment, there is...

PT-2026-112002

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...

PT-2026-111884

Name of the Vulnerable Software and Affected Versions Azure CycleCloud affected versions not specified Description Improper neutralization of special elements used in an OS command leads to an OS command injection. This allows an authorized attacker to execute code locally on the system...

PT-2026-111917

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A race condition occurs in the Windows Kernel due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally on the...

PT-2026-111912

Name of the Vulnerable Software and Affected Versions Windows Container Isolation FS Filter Driver affected versions not specified Description Improper access control in the unionfs.sys driver allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment...

PT-2026-111916

Name of the Vulnerable Software and Affected Versions Windows Portable Device MTP Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Portable Device MTP Driver. This issue allows an unauthorized attacker to elevate privileges on the system throug...

PT-2026-111902

Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...

PT-2026-111922

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A use after free issue exists in Windows Hyper-V, which allows an authorized attacker to execute code locally. Additionally, remote attackers may be able to execute arbitrary code and...

PT-2026-111925

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network. WebDAV is an extension of the HTTP protoco...

PT-2026-111903

Name of the Vulnerable Software and Affected Versions Windows Failover Cluster affected versions not specified Description An integer underflow wrap or wraparound occurs in Windows Failover Cluster, which allows an unauthorized attacker to cause a denial of service over a network. An integer...