PT-2026-35875

Name of the Vulnerable Software and Affected Versions FacturaScripts affected versions not specified Description Broken Access Control exists in the user update logic. The application fails to validate the nick parameter during a 'POST' request to the '/EditUser' endpoint. Although the user...

PT-2026-35691

A vulnerability was determined in Totolink A8000RU 7.1cu.643 b20200521. Impacted is the function setOpenVpnClientCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument enabled can lead to os command injection. The attack may be performed from...

CVE-2026-5940

Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes...

matio:matio_fuzzer: Use-of-uninitialized-value in Mat_int32Swap

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=6315263732809728 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-val...

gdal:openfilegdb_fuzzer: Container-overflow in OGRGeometryFactory::organizePolygons

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5499292961013760 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: openfilegdbfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Container-overflow WRITE 1 Crash Address: 0x7c72883e1bc0...

EUVD-2026-25826

Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes...

CVE-2026-5940 Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes...

CVE-2026-5940 Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes...

CVE-2026-5940

Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes...

CVE-2026-5940

Summary of CVE-2026-5940 : Foxit PDF Editor/Reader contains a use-after-free vulnerability in the annotation flow. The issue arises when a function triggers a UI refresh after removing comments via a script, which may access an invalidated object and cause a crash. The CVE record cites a CVSS v3....

vlc:vlc-demux-dec-libfuzzer-mkv: Heap-buffer-overflow in Read

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=5134971554824192 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-mkv Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x74de560f7741...

Security Bulletin: Multiple vulnerabilities in IBM Rapid Infrastructure Automation

Summary IBM Concert Workflows addresses multiple security vulnerabilities that originate from IBM Rapid Infrastructure Automation. IBM Concert Workflows is built on the same underlying technology and provides equivalent core functionality. Vulnerability Details CVEID:CVE-2025-23022 DESCRIPTION:...

vlc:vlc-demux-dec-libfuzzer-nuv: Heap-buffer-overflow in dav1d_backup_ipred_edge_16bpc

Detailed Report: https://oss-fuzz.com/testcase?key=4643851439767552 Project: vlc Fuzzing Engine: honggfuzz Fuzz Target: vlc-demux-dec-libfuzzer-nuv Job Type: honggfuzzasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7de28f824400 Crash State:...

DrvEye

drivertool A static-analysis & exploitation-triage toolkit...

PT-2026-35569

Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...

PT-2026-35367

Name of the Vulnerable Software and Affected Versions Microsoft Windows RPC Runtime versions Windows 10, 11, and Server 2016 through 2025 Description A critical issue exists in the Windows Remote Procedure Call RPC Runtime within the rpcrt4.dll library, specifically in the NdrComplexTypeBufferSiz...

PT-2026-35275

Name of the Vulnerable Software and Affected Versions LogonTracer versions prior to 2.0.0 Description An OS command injection issue allows a logged-in user to execute arbitrary operating system commands. Recommendations Update to version 2.0.0 or later...

Foxit PDF Editor < 13.2.4 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 13.2.4. It is, therefore affected by multiple vulnerabilities: - Document structural anomalies caused inconsistencies between page element relationships an...

PT-2026-35402

Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes...

Foxit PDF Reader < 2026.1.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 2026.1.1. It is, therefore affected by multiple vulnerabilities: - Document structural anomalies caused inconsistencies between page element relationships and...