Ajar: Measuring Open Privilege in Agent Defenses

A language model agent acts through the tools it is given. The data it reads while working on a task can redirect what it does with those tools. A growing set of techniques for safe and secure agent execution therefore sits between the agent and its tools, aiming to enforce access control,...

CVE-2026-75744: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager Forms JEE is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page...

CVE-2026-17647: Inclusion of Functionality from Untrusted Control Sphere

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere...

RHEL 8 : libsoup (RHSA-2026:69863)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69863 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: SoupWebsocketExtensionDeflate: libsoup: libsoup:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: bluez (UTSA-2026-090077)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090077 advisory. Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of...

CVE-2026-65125: External Control of File Name or Path

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause external control of a file name or path. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and denial of service...

ROS-20260922-73-0076

The vulnerability in Tomcat10 is related to access control deficiencies. Exploiting this vulnerability can allow attackers to increase their privileges...

ROS-20260922-73-0077

The vulnerability in Tomcat11 is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2026-96748

Name of the Vulnerable Software and Affected Versions NVIDIA Infrastructure Controller for Linux affected versions not specified Description An issue exists where an attacker can achieve external control of a file name or path. This could lead to code execution, escalation of privileges, data...

CVE-2026-94570: Improper Validation of Specified Type of Input

SGLang contains a DoS vulnerability caused by missing input validation for AUXDATA ZeroMQ control messages in the Decode worker, which enables an unauthenticated remote attacker with network reachability to the Decode control PULL socket to terminate the Decode control thread and cause a denial o...

PT-2026-96892

Name of the Vulnerable Software and Affected Versions RTI Connext Professional Core Libraries versions 6.1.0 through 6.1.x RTI Connext Professional Core Libraries versions 7.0.0 through 7.3.1.5 RTI Connext Professional Core Libraries versions 7.4.0 through 7.7.0 Description An integer overflow or...

NPM vm2 Arbitrary Command Execution

The vulnerability of the NPM package manager’s vm2 library is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2026-76709: Improper Access Control

A vulnerability exists in the internal administrative component of Analytics and Location Engine ALE. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges, potentially resulting i...

PT-2026-97051

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions 3.17 through 3.17.20 GitHub Enterprise Server versions 3.18 through 3.18.14 GitHub Enterprise Server versions 3.19 through 3.19.11 GitHub Enterprise Server versions 3.20 through 3.20.7 GitHub Enterprise Server...

PT-2026-96694

Name of the Vulnerable Software and Affected Versions open-vsx.org affected versions not specified Description The deployment of the service returned an Access-Control-Allow-Origin header that reflected the requesting origin combined with Access-Control-Allow-Credentials: true on authenticated...

CVE-2026-18162: Improper Control of Generation of Code

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor...

CVE-2026-77252: Improper Access Control

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, caller-supplied projectsfilter and spacesfilter arguments can replace administrator-configured allowlists, and caller-provided project or space clauses can suppress the configured...

PT-2026-97071

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 3.0.0 Description A remote authenticated attacker can access or modify unauthorized resources. This is caused by the use of wildcards in Role-Based Access Control RBAC permission definitions, which is a metho...

CVE-2026-76803: Improper Access Control

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the nuclei/mysql JavaScript library does not enforce the local-file sandbox when a JavaScript template supplies the allowAllFiles MySQL DSN option. An untrusted javascript: template scanning an...

CVE-2026-76804: Improper Access Control

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the workflow template loading path does not enforce the -file capability gate when resolving file: protocol templates referenced by a workflow. An untrusted unsigned workflow can therefore load a...