EUVD-2026-0511

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0502

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0540

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0542

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0557

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0577

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0568

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0627

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0648

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0039

In Plex Media Server PMS through 1.42.2.10156, ability to access /myplex/account with a device token is not properly aligned with whether the device is currently associated with an account...

EUVD-2026-0693

An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same...

EUVD-2026-0697

A weakness has been identified in code-projects Content Management System 1.0. This issue affects some unknown processing of the file /admin/delete.php. Executing manipulation of the argument del can lead to sql injection. The attack can be executed remotely. The exploit has been made available t...

EUVD-2026-0696

REDCap 14.3.13 allows an attacker to enumerate usernames due to an observable discrepancy between login attempts...

PT-2026-4919

Name of the Vulnerable Software and Affected Versions GLib affected versions not specified Description A flaw exists in GLib related to its Unicode case conversion implementation. An integer overflow can lead to memory corruption when processing specially crafted, large Unicode strings. This...

Exploring the Integration of Differential Privacy in Cybersecurity Analytics: Balancing Data Utility and Privacy in Threat Intelligence

To resolve the acute problem of privacy protection and guarantee that data can be used in the context of threat intelligence, this paper considers the implementation of Differential Privacy DP in cybersecurity analytics. DP, which is a sound mathematical framework, ensures privacy by adding a...

PT-2026-7016

Name of the Vulnerable Software and Affected Versions Apache Shiro versions 1. Apache Shiro versions 2. through 2.0.6 Description An observable timing discrepancy exists in Apache Shiro. Before version 2.0.7, the code paths used for non-existent and existing users differ sufficiently, allowing a...

PT-2026-25989

Name of the Vulnerable Software and Affected Versions Tillitis TKey Client versions 1.2.0 and below Description The Tillitis TKey Client package, a Go package for a TKey client, contains a flaw in the tkeyclient Go module. Approximately 1 out of every 256 User Supplied Secrets USS are silently...

PT-2026-21773

Name of the Vulnerable Software and Affected Versions Caddy versions prior to 2.11.1 Description Caddy’s HTTP host request matcher is documented as case-insensitive, but becomes case-sensitive when configured with a large host list more than 100 entries due to an optimized matching path. An...

PT-2026-21772

Name of the Vulnerable Software and Affected Versions Caddy versions prior to 2.11.1 Description Caddy’s HTTP path request matcher is intended to be case-insensitive, but when the match pattern contains percent-escape sequences %xx it compares against the request's escaped path without lowercasin...

CVE-2023-54251

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: Limit TCATAPRIOATTRSCHEDCYCLETIME to INTMAX. syzkaller found zero division error 0 in divs64rem called from getcycletimeelapsed, where sched-cycletime is the divisor. We have tests in parsetaprioschedule so tha...