CVE-2026-109950

FreeRDP versions 3.0.0 through 3.31.x are vulnerable to a heap out-of-bounds read vulnerability when processing RD Gateway messages. The root cause is a mismatch in message lengths where an attacker controlling the gateway can set MsgBytes significantly larger than the NDR string ActualCount with...

PT-2026-86309

The Social Chat – Click To Chat App Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'consent message' JSON Attribute in .qlwapp data-box in all versions up to, and including, 8.6.2 due to insufficient input sanitization and output escaping. This makes it possible for...