CVE-2026-106042: External Control of File Name or Path

An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and obtain EPMM connector credentials transmitted by the application...

CVE-2024-34320

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints...

CVE-2026-109890: Missing Authorization

Missing Authorization vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premium Addons for Elementor: from n/a through 4.11.110...

PT-2026-111328

Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10...

PT-2026-113391

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server - Liberty versions 20.0.0.12 through 26.0.0.10 Description An unauthenticated remote attacker can bypass access controls configured on gRPC service methods. gRPC is a high-performance remote procedure call...

PT-2026-112213

CVE advisory: CVE-2026-70093 - microsoft: Windows Rich Text Edit Control Elevation of Privilege Vulnerability. https://t.co/sHe7L78ean CVE CyberSecurity Microsoft WindowsServer...

PT-2026-112468

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description Improper access control allows an authorized attacker to disclose sensitive information locally and affect the system. Recommendations At the moment, there is no information...

VulnCheck KEV: CVE-2023-32798

Missing Authorization vulnerability in 10up Simple Page Ordering allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Page Ordering: from n/a through 2.5.0...

VulnCheck KEV: CVE-2025-49926

Improper Control of Generation of Code 'Code Injection' vulnerability in Laborator Kalium kalium allows Code Injection.This issue affects Kalium: from n/a through = 3.25...

VulnCheck KEV: CVE-2026-24611

Unauthenticated Broken Access Control in MetForm Pro = 3.9.1 versions...

VulnCheck KEV: CVE-2026-52714

Unauthenticated Broken Access Control in SEO Plugin by Squirrly SEO = 12.4.16 versions...

Microsoft Windows: CVE-2026-69783: Windows Update Elevation of Privilege Vulnerability

External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally...

PT-2026-112947

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally...

CVE-2026-105733: Incorrect Initialization of Resource

Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally...

CVE-2026-97381: Origin Validation Error

Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname that is not on the...

CVE-2026-106597: Missing Authorization

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8...

CVE-2026-55675: Improper Control of Generation of Code

The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untrusted fork commit in the prinfo artifact, and the secret-bearing workflowrun job in...

CVE-2024-34320

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints...

PT-2026-111673

Name of the Vulnerable Software and Affected Versions Ivanti Xtraction versions prior to 2026.4 Description An External Control of File Name or Path issue allows a remote authenticated attacker to redirect application-generated requests to an endpoint under their control. This can lead to the the...

ROS-20261013-73-0380

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...