CVE-2026-86673: Use of Hard-coded Credentials

A vulnerability was determined in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function mysqliconnect of the file config/database.php of the component Database Connection. This manipulation causes hard-coded credentials. The...

CVE-2026-71343: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally...

CVE-2026-72983: Use After Free

Use after free in Windows Internet Connection Sharing ICS allows an unauthorized attacker to execute code over a network...

PT-2026-86974

Name of the Vulnerable Software and Affected Versions ASUS Control Center Express Agent affected versions not specified Description Missing authentication for a critical function allows an unauthenticated nearby user to achieve remote code execution and control the host via a direct connection to...

PT-2026-87077

An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote host's identity, and no option was provided to enable it. A man-in-the-middle attacker positioned...

PT-2026-87881

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally...

CVE-2026-69331: Use After Free

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-68886: Use After Free

Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally...

CVE-2026-72926: Use After Free

Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...

CVE-2026-71333: Use After Free

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-69455: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

389-ds-base security, bug fix, and enhancement update

2.8.0-10 - Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket rhel-9.8.z - Resolves: RHEL-222321 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and...

CVE-2026-72967: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...

PT-2026-87300

Name of the Vulnerable Software and Affected Versions Windows Network Connection Broker affected versions not specified Description A use after free issue exists in the Windows Network Connection Broker. This allows an authorized attacker to disclose sensitive information locally and affect the...

PT-2026-87146

Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description A security issue in the LDAP authorization integration allows pooled LDAP connections to retain stale authentication identities under specific configurations. This causes subsequent...

CVE-2026-86600: Insufficiently Protected Credentials

In affected Snowflake drivers, WORKLOADIDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configured host is a Snowflake endpoint. An attacker who can modify the connection configuration can cause the driver to mint a...

PT-2026-88180

A vulnerability was determined in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function mysqli connect of the file config/database.php of the component Database Connection. This manipulation causes hard-coded credentials. The...

NewStart CGSL MAIN 7.02 : openssh Multiple Vulnerabilities (NS-SA-2026-0101)

The remote NewStart CGSL host, running version MAIN 7.02, has openssh packages installed that are affected by multiple vulnerabilities: - ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re- exchange. This outcome occurs only on the client side...

CVE-2026-72964: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Internet Connection Sharing ICS allows an authorized attacker to perform tampering locally...

CVE-2026-19397: Missing Authentication for Critical Function

Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session. Refer to the ' Security Update for ASUS Control Center Express Agent '...