PT-2026-127153

Tanium addressed an unauthorized code execution vulnerability in Certificate Manager...

Vulnerabilities Resolved in Veeam Backup for Microsoft 365 8.6

Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...

PT-2026-126662

A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Dangerous Function vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this...

PT-2026-126621

A newly disclosed vulnerability, CVE-2026-92372 CVSS 8.8 – High, affects TeamViewer clients running on Linux and macOS. The flaw exists in TeamViewer's screen-image decoder. An attacker controlling a remote computer can send specially crafted screen data during a session, triggering an...

Joern 4.0.666

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

REDCap 17.4.3 Survey Passthru Data Import RCE Checker

REDCap versions 13.3.0 through affected pre-fixed branches contain a survey passthru and Data Import path/stream handling issue that may allow remote code execution. This tool fingerprints targets, validates public survey hashes, and probes passthru routes...

PT-2026-127300

Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Security Update for Microsoft ASP.NET Core (October OOB 2026)

The Microsoft ASP.NET installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute...

Security Update for Microsoft .NET Core (October OOB 2026)

The Microsoft .NET Core installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. CVE-2026-70197 -...

Security Update for Microsoft .NET Core SDK (October OOB 2026)

The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. CVE-2026-70197 -...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : Brotli vulnerability (USN-8956-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8956-1 advisory. It was discovered that Brotli incorrectly handled certain compressed streams. A remote attacker could possibly use this issue to...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-146122)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146122 advisory. A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated...

Python Library Brotli 1.0.3 < 1.0.10 / 1.1.x < 1.1.1 / 1.2.x < 1.2.1 Out-of-Bounds Write (Brotli2Shell)

The detected version of the Brotli Python package is 1.0.3 or later but prior to 1.0.10, or 1.1.x prior to 1.1.1, or 1.2.x prior to 1.2.1. It is, therefore, affected by an out-of-bounds write vulnerability in the bundled Brotli decoder: - A buffer overflow vulnerability in the Brotli decoder...

Google Brotli Unchecked Return Value Vulnerability

Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream...

PT-2026-127292

Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

PT-2026-126695

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a T.140 RED heap buffer overflow using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to crash. The chan sip channel...

PT-2026-126703

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require us...

PT-2026-126689

Adobe Connect is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...

APSB26-162 : Security update available for Adobe Campaign Classic

Adobe has released a priority 2 security update for Adobe Campaign Classic. This update addresses vulnerabilities rated critical that could result in arbitrary code execution, security feature bypass, and privilege escalation. Adobe is not aware of any exploits in the wild for any of the issues...

APSB26-182 : Security update available for Adobe Connect

Adobe has released a priority 2 security update for Adobe Connect. This update resolves a vulnerability rated critical that could result in arbitrary code execution. Adobe is not aware of any exploits in the wild for any of the issues addressed in this update...