Microsoft Azure Monitor Agent < 1.14.0 Elevation of Privilege (CVE-2026-32204)

The version of Microsoft Azure Monitor Agent installed on the remote host is prior to 1.14.0. It is, therefore, affected by an elevation of privilege vulnerability: - External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. An...

PT-2026-41317

Name of the Vulnerable Software and Affected Versions Microsoft APM versions prior to 0.13.0 Description Microsoft APM contains a Windows-specific archive extraction boundary failure affecting users on Python 3.10 and 3.11 runtimes. When the apm install command is provided with a local .tar.gz fi...

Microsoft 365 Copilot < 19.2604.43111.0 Spoofing (CVE-2026-41614)

The Windows 'Microsoft 365 Copilot' app formerly known as 'Microsoft 365 Office' installed on the remote host is prior to 19.2604.43111.0. It is, therefore, affected by a spoofing vulnerability: - Improper access control in Microsoft 365 Copilot for Desktop allows an unauthorized attacker to...

CVE-2026-25243 affecting package valkey for versions less than 8.0.9-1

CVE-2026-25243 affecting package valkey for versions less than 8.0.9-1. A patched version of the package is available...

CVE-2025-14179 affecting package php for versions less than 8.3.31-1

CVE-2025-14179 affecting package php for versions less than 8.3.31-1. A patched version of the package is available...

CVE-2026-7262 affecting package php for versions less than 8.3.31-1

CVE-2026-7262 affecting package php for versions less than 8.3.31-1. A patched version of the package is available...

CVE-2026-6722 affecting package php for versions less than 8.3.31-1

CVE-2026-6722 affecting package php for versions less than 8.3.31-1. A patched version of the package is available...

CVE-2026-44656 affecting package vim for versions less than 9.2.0461-1

CVE-2026-44656 affecting package vim for versions less than 9.2.0461-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-6666 affecting package pgbouncer for versions less than 1.25.2-1

CVE-2026-6666 affecting package pgbouncer for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23479 affecting package valkey for versions less than 8.0.9-1

CVE-2026-23479 affecting package valkey for versions less than 8.0.9-1. A patched version of the package is available...

CVE-2026-23631 affecting package valkey for versions less than 8.0.9-1

CVE-2026-23631 affecting package valkey for versions less than 8.0.9-1. A patched version of the package is available...

CVE-2026-7261 affecting package php for versions less than 8.3.31-1

CVE-2026-7261 affecting package php for versions less than 8.3.31-1. A patched version of the package is available...

CVE-2026-7568 affecting package php for versions less than 8.3.31-1

CVE-2026-7568 affecting package php for versions less than 8.3.31-1. A patched version of the package is available...

CVE-2026-41602 affecting package kata-containers-cc for versions less than 3.15.0.aks0-10

CVE-2026-41602 affecting package kata-containers-cc for versions less than 3.15.0.aks0-10. A patched version of the package is available...

CVE-2026-41603 affecting package thrift for versions less than 0.15.0-6

CVE-2026-41603 affecting package thrift for versions less than 0.15.0-6. A patched version of the package is available...

CVE-2026-41605 affecting package thrift for versions less than 0.15.0-6

CVE-2026-41605 affecting package thrift for versions less than 0.15.0-6. A patched version of the package is available...

CVE-2026-41604 affecting package thrift for versions less than 0.15.0-6

CVE-2026-41604 affecting package thrift for versions less than 0.15.0-6. A patched version of the package is available...

CVE-2026-41636 affecting package thrift for versions less than 0.15.0-6

CVE-2026-41636 affecting package thrift for versions less than 0.15.0-6. A patched version of the package is available...

CVE-2026-41602 affecting package thrift for versions less than 0.15.0-6

CVE-2026-41602 affecting package thrift for versions less than 0.15.0-6. A patched version of the package is available...

NPM: DeepSeek TUI has SSRF via HTTP Redirect Bypass in fetch_url Tool

NPM: DeepSeek TUI has SSRF via HTTP Redirect Bypass in fetchurl Tool vulnerability discovered by ? in WordPress Npm deepseek-tui versions 0.8.22...