PT-2026-114063

Name of the Vulnerable Software and Affected Versions Swetrix Cloud versions prior to 5.1.0 Description An authorization flaw exists in the addProject function within the ProjectController. This issue allows authenticated users to hijack arbitrary projects by moving them into an organization they...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: tomcat (UTSA-2026-130156)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130156 advisory. Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token...

CVE-2026-88107

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-88106

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-83696

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-83696

A Use after free vulnerability exists in the Windows Cloud Files Mini Filter Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.0 (High) . No specific exploitation details or patch versions are provided in the docum...

CVE-2026-88106

A use after free vulnerability exists in the Windows Cloud Files Mini Filter Driver . This flaw allows an authorized attacker to achieve local privilege elevation . No specific software versions or remediation details are provided in the documents, and there are no reports of active exploits.

CVE-2026-88107

A Use after free vulnerability exists in the Windows Cloud Files Mini Filter Driver . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). Official remediation is available via...

CVE-2026-23707

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability CWE-89 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud...

CVE-2026-106171

A improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiManager Cloud 7.6.2 through 7.6.6 may allow attacker to escalation of privilege via specially crafted packets...

CVE-2026-106172

A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker...

CVE-2025-46773

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability CWE-89 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud...

CVE-2026-106172

A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker...

CVE-2026-106172

A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker...

CVE-2026-106172

Fortinet FortiSandbox and FortiSandbox Cloud products are vulnerable to a use of hard-coded cryptographic key (CWE-321). This vulnerability affects FortiSandbox versions 5.2.0 through 5.2.1 , 5.0.0 through 5.0.6 , and all 4.4 versions , as well as FortiSandbox Cloud versions 5.2.0 through 5.2.1 ,...

CVE-2025-46773

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability CWE-89 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud...

CVE-2026-23707

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability CWE-89 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud...

CVE-2026-23706

Fortinet FortiAnalyzer and FortiManager products are affected by an SQL Injection vulnerability [CWE-89] caused by improper neutralization of special elements in SQL commands. The flaw impacts FortiAnalyzer versions 7.6.0 through 7.6.4, 7.4.0 through 7.4.7, all 7.2 versions, and various FortiAnal...

CVE-2025-46773

A SQL Injection vulnerability [CWE-89] exists in Fortinet FortiAnalyzer (versions 7.6.0-7.6.4, 7.4.0-7.4.7, and all 7.2 versions) and FortiAnalyzer Cloud (versions 7.6.2-7.6.4, 7.4.1-7.4.7, and 7.2.1-7.2.11). This flaw allows a low privileged user to execute arbitrary commands through specially c...

CVE-2026-106171

A improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiManager Cloud 7.6.2 through 7.6.6 may allow attacker to escalation of privilege via specially crafted packets...