PT-2026-92416

Name of the Vulnerable Software and Affected Versions Concrete CMS versions prior to 9.5.3 Description An issue exists in the dashboard sitemap reorder action ConcreteControllerBackendDashboardSitemapUpdate where the system only verifies the global access sitemap task permission and fails to chec...

PT-2026-92327

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A permission bypass exists in multiple locations due to a missing permission check. This flaw allows for local escalation of privilege without requiring...

PT-2026-92304

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An incorrect bounds check in multiple functions within remap.c allows for a possible out-of-bounds write. This condition could enable local escalation of...

PT-2026-92323

In gf algo get cached dump data of gf algo.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92338

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A missing bounds check in multiple locations allows for a possible out-of-bounds write, which is a condition where data is written outside the intended memory...

PT-2026-92343

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing permission check in the Setup Wizard allows for remote package installation. This flaw enables remote escalation of privilege without requiring...

PT-2026-92040

Name of the Vulnerable Software and Affected Versions Dell SmartFabric OS10 Software versions prior to 10.6.1.3 Description An issue exists where the software allows the download of code without an integrity check. A high privileged attacker with remote access could exploit this to achieve code...

PT-2026-92292

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A missing bounds check in the Wave6VpuDecFlush function within wave6.c allows for an out-of-bounds write. This condition can be exploited to achieve local...

PT-2026-92394

In Concrete CMS before 9.5.3, the SEO Bulk Update Meta Tags editor did not check per-page edit permissions before saving. The saveRecord action validated the per-page CSRF token but never called canEditPageProperties for the target page, so a user who was granted access to the bulk SEO tool and...

PT-2026-92361

In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92344

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the phNxpNciHal ext process nfc init rsp function within phNxpNciHal ext.cc allows for a possible out-of-bounds write. This condition c...

PT-2026-92345

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A missing bounds check in multiple locations allows for a possible out-of-bounds write, which is a condition where data is written outside the intended memory...

PT-2026-92353

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An incorrect bounds check in the Vp9DecEndOfStream function within vp9hwd output.cc allows for a possible out-of-bounds read. This condition can lead to local...

PT-2026-92334

Name of the Vulnerable Software and Affected Versions VPU affected versions not specified Description A missing permission check in VPU allows for a permission bypass. This issue can lead to local escalation of privilege, granting the attacker System execution privileges without requiring user...

PT-2026-93187

Netcore NR268 firmware version 1.7.121109 contains a security check bypass vulnerability in the parame put file.cgi restore archive prefix validation. Attackers can exploit the flawed prefix check in put parame file cgi.c to bypass restricted restore archive handling...

PT-2026-93174

CVE-2026-68491 An insufficient check allowed for the overwrite of arbitrary files via a symlink. https://t.co/CZ9pLnixMr...

CVE-2026-57014: Out-of-bounds Write

In phNxpNciHalextprocessnfcinitrsp of phNxpNciHalext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Fedora 43 : perl-DBI (2026-a4674c5df6)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a4674c5df6 advisory. 1.653 Fix test for 32bit-perl Fix arbitrary module and file loading via dbmtype/dbmmldbm CVE-2026-78030 Tighten symlink outside of fdir CVE-2026-153...

ZITADEL: Unauthorized Token Privilege Escalation in OAuth2 Token Exchange

Summary A vulnerability in ZITADEL’s OAuth2 Token Exchange endpoint allows an authenticated user or client to exchange a low-privilege access token for a token with elevated permissions at a completely different application. This bypasses the intended authorization and separation policies...

CVE-2026-86897

This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to access sensitive user data...