PT-2026-82487

Name of the Vulnerable Software and Affected Versions Zbtlink WE1326 firmware 19.1101 Zbtlink WE357 firmware 19.1101 Zbtlink WE5926 firmware 19.1101 Zbtlink WE5926-WD firmware 19.1101 Zbtlink WE826-Q firmware 19.1101 Zbtlink WE826-T2 firmware 19.1101 Zbtlink WE826-WD firmware 19.1101 Zbtlink WG10...

PT-2026-82793

Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtain command execution capabilities. Successful exploitation could allow unauthorized interaction with privileged functionality and may lead to...

Security update for gh (important)

openSUSE security update: security update for gh ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21663-1 Rating: important References: bsc1266618 bsc1276661 bsc1276662 bsc1276663 bsc1276664 Cross-References: CVE-2026-39821 CVE-2026-64652...

PT-2026-82730

Name of the Vulnerable Software and Affected Versions ServiceNow AI platform affected versions not specified Description An unauthenticated user can execute arbitrary SQL statements against the underlying database of the ServiceNow AI platform. This occurs via a SQL injection in the dynamic schem...

PT-2026-82413

Name of the Vulnerable Software and Affected Versions Spring Security version 7.1.0 Spring Security versions 7.0.0 through 7.0.6 Spring Security versions 6.5.0 through 6.5.11 Spring Security versions 6.4.0 through 6.4.18 Spring Security versions 5.8.0 through 5.8.27 Spring Security versions 5.7.0...

Zimbra Collaboration Suite 10.1.19 SMTP Command Injection

Zimbra Collaboration Suite versions prior to 10.1.20 contain an OS command injection vulnerability in the optional zimbra-snmp package when SNMP notifications are enabled. This exploit injects a crafted service status message through an unauthenticated SMTP recipient address, causing the SNMP...

PT-2026-82623

Name of the Vulnerable Software and Affected Versions UI-TARS-desktop mcp-http-server version 1.2.4 prior to commit c2ad42e3eb9b27830db41a3e6f51ca7179d9b168 Description The startServer.ts file in the mcp-http-server package defaults the listen address to :: when no host is provided. This causes t...

PT-2026-82732

Name of the Vulnerable Software and Affected Versions Unitree G1 EDU firmware versions prior to 1.5.3 Description An unauthenticated remote code execution flaw allows network-adjacent attackers to execute arbitrary commands as root. This is achieved by chaining three weaknesses: an unauthenticate...

PT-2026-82388

Name of the Vulnerable Software and Affected Versions ShopApper Mobile App Builder Service for WooCommerce WordPress plugin versions prior to 0.4.63 Description The plugin fails to verify user permissions before performing stock-update operations via a REST endpoint. This allows any authenticated...

PT-2026-82445

Name of the Vulnerable Software and Affected Versions ACPT Pro - Custom Post Types Plugin for WordPress versions prior to 2.0.64 Description An unauthenticated privilege escalation issue allows an attacker to create a WordPress administrator account. This flaw has been exploited in the wild via t...

PT-2026-82799

Name of the Vulnerable Software and Affected Versions Xiiaozet LK100W affected versions not specified Description A critical management function can be invoked without authentication, allowing a remote attacker to enable administrative services that should be restricted. This may permit...

PT-2026-82653

Name of the Vulnerable Software and Affected Versions ServiceNow AI platform affected versions not specified Description An improper access control issue exists within the ServiceNow AI platform. This flaw allows an unauthenticated user to create or modify instance data beyond intended permission...

PT-2026-82649

Name of the Vulnerable Software and Affected Versions cPanel & WHM versions prior to 11.110.0.141 cPanel & WHM versions prior to 11.134.0.53 cPanel & WHM versions prior to 11.136.0.37 cPanel & WHM versions prior to 11.138.0.2 WP Squared versions prior to 11.138.1.7 Description An eval injection a...

PT-2026-82565

Name of the Vulnerable Software and Affected Versions mcp-go versions prior to 0.56.0 Description The software accepts requests on its HTTP transports without validating the Host header. Specifically, the StreamableHTTPServer.ServeHTTP function in server/streamable http.go and the...

PT-2026-82729

Name of the Vulnerable Software and Affected Versions Now Platform affected versions not specified Description A sandbox escape issue exists in the Now Platform. This flaw allows an unauthenticated user to execute arbitrary code, which could result in unauthorized access to the platform beyond...

PT-2026-82608

openssl encrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inject ANSI escape sequences that forge the fingerprint verification line displayed to users. Attackers can deliver a crafted identity bundle through normal contact-exchange flows ...

PT-2026-82837

Name of the Vulnerable Software and Affected Versions WPMU DEV Dashboard versions prior to 5.0.2 Description An authentication bypass exists in the Hub Single Sign-On SSO flow, potentially affecting an estimated 350,000 WordPress sites. The issue stems from HMAC canonicalization confusion—a...

PT-2026-83118

Name of the Vulnerable Software and Affected Versions PaperCut MF affected versions not specified PaperCut NG affected versions not specified Description An unsafe dynamic class loading issue exists in the database connection utilities. The application instantiates database driver classes based o...

PT-2026-83117

Name of the Vulnerable Software and Affected Versions PaperCut MF affected versions not specified PaperCut NG affected versions not specified Description An improper access control issue exists in the web management interface. Under specific conditions, unauthenticated remote requests targeting...

PT-2026-82486

Name of the Vulnerable Software and Affected Versions Zbtlink L3 V2 8 version 3.0.0.4.528 Zbtlink WE826-T2 version 19.1101 Zbtlink ZBT-7628 version 1.0.0.2.007 Zbtlink ZBT-ZBT7621 version 1.0.0.3.001 MoreQuick MQAC-7620 version 1.0.0.2.000 MoreQuick MQAC-7620A version 1.0.0.2.000 MoreQuick...