CVE-2026-62654: Download of Code Without Integrity Check

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This...

PT-2026-88264

In kvm iommu map sg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88266

In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88262

In stpropnci process std of stpropnci std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88257

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the openLogicalChannel function across multiple files allows for an out-of-bounds write. This condition can be leveraged to achieve loc...

PT-2026-88295

Name of the Vulnerable Software and Affected Versions MicroXR Blobstore affected versions not specified Description A missing permission check in MicroXR Blobstore allows unauthorized access to files belonging to other applications. This flaw enables local escalation of privilege without requirin...

PT-2026-88232

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A mimetype check bypass exists in the LocalImageResolver.java component within the SystemUI process. While a mimetype allowlist was implemented to prevent the use of bug-prone RAW decoders in...

CVE-2026-28659: Improper Privilege Management

In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88256

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the checkUiccListenConfigNeeded function within RoutingManager.cpp allows for an out-of-bounds write. This flaw could enable remote cod...

PT-2026-87173

Name of the Vulnerable Software and Affected Versions Apache Airflow FAB provider versions 3.7.3 through 3.8.0 Description An issue exists during OAuth login when the FAB auth manager is configured with Azure AD as an OAuth provider. The software fails to validate the issuer or audience of Azure ...

CVE-2026-45521: Protection Mechanism Failure

In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28666: Incorrect Authorization

In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-87162

Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description An issue in the query statistics serialization on the router allows users with monitoring privileges to access unredacted search query text from operations performed by other users. Th...

PT-2026-88501

Impact The endpoints /rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members checked only that the caller could manage the role type, not that they could see the project named in the request. A user holding role-management permission could therefore name any project on...

PT-2026-87031

The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Stripe OAuth return endpoint in all versions up to, and including, 5.27.4. This makes it possible for unauthenticated attackers to overwrite the site...

PT-2026-87190

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Server-Side Request Forgery SSRF vulnerability in the file upload functionality system/core/uploader.php at lines 509-532. When the "upload from URL" feature follows an HTTP redirect, the redirected...

PT-2026-87847

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description Improper validation of the integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no...

PT-2026-88502

Impact A log streaming event destination may reference a generic HTTP credential, and the destination resolved and decrypted whichever credential it named without checking that the caller had access to it. A user holding a custom global role scoped to Log Streaming operations could therefore name...

PT-2026-88238

In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28652: Missing Authorization

In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...