CVE-2026-12185 BKS/UBER keystore allocates from untrusted lengths before integrity check

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

CVE-2026-12185

In Bouncy Castle for Java before 1.85, the BKS/UBER keystore allocates from untrusted lengths before integrity check, and this issue also affects Java LTS builds before 2.73.12. Affected products: Bouncy Castle Java libraries for keystores; root cause is allocation using untrusted lengths prior t...

CVE-2026-12185

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

CVE-2026-12185 BKS/UBER keystore allocates from untrusted lengths before integrity check

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

CVE-2026-12185

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

HashiCorp Consul Template 0.41.4 Sandbox Path Bypass / Information Disclosure

This repository includes details for a HashiCorp Consul Template version 0.41.4 sandbox path bypass information disclosure vulnerability. HashiCorp Consul Template versions 0.41.4 and earlier contain a time-of-check to time-of-use flaw in the file template helper where symlink validation is...

PT-2026-67169

Name of the Vulnerable Software and Affected Versions geniezone affected versions not specified Description A missing bounds check in geniezone allows for an out-of-bounds write, which is a condition where data is written outside the intended memory boundary. This flaw could enable local escalati...

PT-2026-67160

In TFA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10991467; Issue ID: MSV-7764...

CVE-2026-20483: Missing Authorization

In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11087526; Issue ID: MSV-8243...

PT-2026-67400

Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an OS command injection vulnerability in action audio.php that allows authenticated attackers to execute arbitrary operating system commands by passing an unsanitized pid parameter into an exec call...

PT-2026-67068

The Simply Schedule Appointments WordPress plugin before 1.6.12.11 does not perform a capability check on an administrative appointment-listing shortcode, and its per-user result scoping fails open for non-staff users, allowing users with the Contributor role and above to disclose all customers'...

PT-2026-67175

In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757...

CVE-2026-18574: Authentication Bypass Using an Alternate Path or Channel

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server MDS could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful...

Oracle Linux 10 : gstreamer1-plugins-good (ELSA-2026-49508)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49508 advisory. 1.26.7-2.2 - Fix integer overflow and bounds check vulnerabilities in uncompressed video handling CVE-2026-5056 Resolves: RHEL-222333 Tenable has extracted th...

PT-2026-67069

The GEO my WP WordPress plugin before 4.5.5.3 does not perform any ownership or capability check on two of its logged-in AJAX actions, allowing users with subscriber-level access or above to modify or permanently delete other users' and posts' geolocation records by supplying arbitrary record IDs...

PT-2026-67062

Name of the Vulnerable Software and Affected Versions Tag, Category, and Taxonomy Manager versions prior to 3.51.0 Description This issue occurs because the plugin fails to verify if a user is authorized to access a referenced post before processing it and returning derived data. Consequently,...

CVE-2026-20475: Out-of-bounds Write

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748...

PT-2026-67155

Name of the Vulnerable Software and Affected Versions apusys affected versions not specified Description A missing bounds check in the software allows for a local escalation of privilege. This issue can be exploited by a malicious actor who has already obtained System privilege, and it does not...

CVE-2026-20491: Out-of-bounds Write

In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981478 Note: For MT6890, MT6990, MT6988 / AUTO00851173 Note: For...

PT-2026-67159

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10991588 Note:...