PT-2026-87882

Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...

PT-2026-87300

Name of the Vulnerable Software and Affected Versions Windows Network Connection Broker affected versions not specified Description A use after free issue exists in the Windows Network Connection Broker. This allows an authorized attacker to disclose sensitive information locally and affect the...

PT-2026-87146

Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description A security issue in the LDAP authorization integration allows pooled LDAP connections to retain stale authentication identities under specific configurations. This causes subsequent...

PT-2026-89356

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description An issue exists where the software incorrectly handles the reuse of connections when client certificate settings are modified. This behavior can lead to the application of incorrect client...

CVE-2026-71352: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network...

Oracle Linux 9 : ELSA-2026-64784-0: / 389-ds-base (ELSA-2026-647840)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-647840 advisory. - Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket...

CVE-2026-72964: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Internet Connection Sharing ICS allows an authorized attacker to perform tampering locally...

PT-2026-87372

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

PT-2026-87077

An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote host's identity, and no option was provided to enable it. A man-in-the-middle attacker positioned...

CVE-2026-72966: Missing Authorization

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally...

CVE-2026-86600: Insufficiently Protected Credentials

In affected Snowflake drivers, WORKLOADIDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configured host is a Snowflake endpoint. An attacker who can modify the connection configuration can cause the driver to mint a...

PT-2026-88180

A vulnerability was determined in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function mysqli connect of the file config/database.php of the component Database Connection. This manipulation causes hard-coded credentials. The...

CVE-2026-86673: Use of Hard-coded Credentials

A vulnerability was determined in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function mysqliconnect of the file config/database.php of the component Database Connection. This manipulation causes hard-coded credentials. The...

EulerOS 2.0 SP12 : curl (EulerOS-SA-2026-3328)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw in curl's cookie parsing logic allows a malicious HTTP server to set 'super cookies' that bypass the Public Suffix List check. This enables a...

CVE-2026-72983: Use After Free

Use after free in Windows Internet Connection Sharing ICS allows an unauthorized attacker to execute code over a network...

Security update for curl

This update for curl fixes the following issues: CVE-2026-5773: wrong reuse of SMB connection bsc1262633. CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. CVE-2026-8926: password leak with netrc and user in URL bsc1268412. CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause a...

Security update for httpcomponents-client

This update for httpcomponents-client fixes the following issue: CVE-2026-64607: improper release of underlying connection back to connection manager when an invalid or unsupported Content-Encoding header value in a response message bsc1273163. Patch Instructions: To install this SUSE update use...

SUSE-SU-2026:4028-1 Security update for httpcomponents-client

This update for httpcomponents-client fixes the following issue: - CVE-2026-64607: improper release of underlying connection back to connection manager when an invalid or unsupported Content-Encoding header value in a response message bsc1273163...

ROS-20260907-73-0058

The vulnerability in Erlang is related to incorrect comparison of the number of connections. Exploiting this vulnerability allows a remote attacker to bypass existing security restrictions...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass via the connection reuse process. An attacker can gain unauthorized access to another user's authenticated session by sending a request using empty credentials, which may be routed over a previously authenticated...