PT-2026-88801

DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-88809

DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-88796

OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability...

KLA91275 DoS vulnerability in Microsoft Browser

Denial of service vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2026-85046 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is...

PT-2026-88802

Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-88794

Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-88803

Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability...

Linux 9P Protocol p9_client_walk Heap Buffer Overflow

The vulnerability of the p9clientwalk function in the net/9p/client.c module of the 9P protocol implementation in the Linux operating system is related to the dereferencing of a pointer whose validity period has expired. Exploiting this vulnerability allows an attacker to compromise the...

CVE-2026-49315: Undefined Security Weakness

DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability...

SAP NetWeaver AS Java Denial of Service (3736494)

The version of SAP NetWeaver Application Server Java detected on the remote host is affected by a denial of service vulnerability as referenced in SAP Security Note 3736494: - SAP Process Integration SOAP Adapter allows a privileged user to send specially crafted requests containing deeply nested...

CVE-2026-9215

A cross site request forgery CSRF vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is...

CVE-2026-77110

Adobe Commerce is affected by a Path Traversal vulnerability (CWE-22) that can lead to a security feature bypass . An attacker with high privileges can access unauthorized files or directories outside intended restrictions, resulting in limited availability disruption . Exploitation requires no u...

CVE-2026-77111 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to availability...

CVE-2026-77111

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to availability...

CVE-2026-9215

A CSRF vulnerability in the web interfaces of NETGEAR XR500, XR1000, and XR1000v2 routers allows an attacker, via social engineering , to induce a router administrator into tampering with router configuration, resulting in high integrity and availability impact with no confidentiality impact. The...

CVE-2026-82067

Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled state during server startup. An unauthenticated user with network access to a deployment where this condition occurs can perform...

Security Bulletin: IBM Sterling Global Availability Mailbox affected by a vulnerability in Bouncy Castle 1.84

Summary Bouncy Castle for Java before 1.85 was affected with the CVE-2026-59641 Vulnerability Details CVEID:CVE-2026-59641 DESCRIPTION: In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation. This issue also affects Bouncy Castle for Java LT...

CVE-2026-33387

A template injection vulnerability in the Dashboards functionality of Nozomi Networks Guardian/CMC (before 26.3.0 ) is caused by improper validation of an input parameter. An authenticated user with required privileges can define a dashboard containing a malicious payload, or a victim can be soci...

CVE-2026-77102

CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe...

CVE-2026-77097

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...