ROS-20261012-73-0165

The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-109305: Improper Neutralization of Special Elements Used in a Template Engine

Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the "has some" and "has every" operators. Users with the System Messages permission can supply two-argument callables such as passthru or system in sandboxed templates t...

CVE-2026-103537: Undefined Security Weakness

Thelia 2.6.1 contains an absolute path traversal vulnerability in its Smarty template handling that enables SSTI and remote code execution. The checkTemplate validation restricts relative directory traversal sequences such as ../ but does not reject absolute paths, allowing an authorized user to...

PT-2026-110936

Name of the Vulnerable Software and Affected Versions Continue CLI @continuedev/cli versions prior to 1.5.48 Description A permission bypass exists where the Bash allow-rules use prefix matching on the entire command string. This allows an attacker to execute unapproved commands by chaining them...

PT-2026-110617

Name of the Vulnerable Software and Affected Versions Thelia version 2.6.1 Description An absolute path traversal issue exists in the Smarty template handling. The checkTemplate function fails to reject absolute paths, although it restricts relative directory traversal sequences like ../. This...

ALSA-2026:80687 Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data extraction CVE-2026-96275...

Microsoft Exchange Server Memory Reclamation Code Execution

The vulnerability of Microsoft Exchange Server’s mail server is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Windows Imaging Component Code Execution

The vulnerability of the Windows Imaging Component WIC framework in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Cisco NX-OS MPLS Operation Code Execution

The vulnerability of the MPLS Operation, Administration, and Maintenance OAM function in the Cisco NX-OS operating system of Cisco Nexus 3000 Series switches and Cisco Nexus 9000 Series switches is related to the release of previously unallocated memory. Exploiting this vulnerability can allow an...

PT-2026-110957

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware versions FW1120.00 through FW1120.01 IBM Power Systems Firmware versions FW1110.00 through FW1110.31 IBM Power Systems Firmware versions FW1060.00 through FW1060.81 Description A buffer overflow exists in the host...

PT-2026-110580

Name of the Vulnerable Software and Affected Versions Progress ShareFile Storage Zones Controller versions prior to 5.12.7 Description The FileCopyService uses a remote file identifier to construct a local temporary file path without enforcing containment. This flaw allows the service to write...

PT-2026-110601

Name of the Vulnerable Software and Affected Versions Thelia version 2.6.0 Description The document update endpoint fails to validate file types, unlike the document upload endpoint which correctly blocks executable files. An attacker with administrative permissions can exploit this to upload...

PT-2026-110602

Name of the Vulnerable Software and Affected Versions Thelia version 2.6.0 Description The store banner upload feature performs insufficient filetype validation by relying exclusively on client-supplied MIME types. This allows an attacker with administrative access to upload a PHP file disguised ...

PT-2026-110952

Name of the Vulnerable Software and Affected Versions Nginx UI versions 2.0.0-rc.6 through 2.4.0 Description An authenticated attacker can bypass the security layer by using the nginx config add MCP tool to write configuration files to disk and trigger a reload. This occurs because the tool fails...

ROS-20261012-73-0228

The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-109422: Exposed Dangerous Method or Function

NetEase Cloud Music client for Windows cloudmusic.exe versions 3.1.38 and 3.1.39.205426 contains a remote code execution vulnerability in the renderer-process IPC bridge os.navigateExternal, which passes caller-supplied URLs to ShellExecuteW without validating the URL scheme. An attacker able to...

PT-2026-110956

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware versions FW1060.00 through FW1060.81 Description A flaw exists in the service processor mailbox interface. An attacker with authenticated service-level access to the Flexible Service Processor FSP can send a speciall...

CVE-2026-103658: Heap-based Buffer Overflow

GNU Aspell 0.60.8.2 first vulnerable version is not known contains a heap-based buffer overflow write CWE-122 in its read-only dictionary loader. String::reserve in common/string.hpp computes its capacity check with a signed int ints + 1, so a requested size of 0x7FFFFFFF wraps negative and the...

TencentOS Server 3: ansible-core (TSSA-2026:1118)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1118 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

EulerOS 2.0 SP11 : icu (EulerOS-SA-2026-4328)

According to the versions of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the...