PT-2026-96988

Name of the Vulnerable Software and Affected Versions Adobe Connect affected versions not specified Description Adobe Connect contains a reflected Cross-Site Scripting XSS flaw, which occurs when an application includes untrusted data in a web page without proper validation. This allows an attack...

PT-2026-96983

Name of the Vulnerable Software and Affected Versions Adobe Connect versions prior to 12.12 Description Adobe Connect contains an SQL Injection flaw, which occurs when special elements used in an SQL command are not properly neutralized. This allows a low-privileged attacker to execute arbitrary...

CVE-2026-18462: Integer Overflow or Wraparound

Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional Core Libraries allows Shared Resource Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1...

Unity Linux 20.1060e / 20.1070e Security Update: wpa_supplicant (UTSA-2021-001733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2021-001733 advisory. The implementations of EAP-PWD in wpasupplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the...

CVE-2026-83602: Improper Access Control

Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api/v3/webapiv3.c with HTTPACLNOCHECK and HTTPACCESSANONYMOUSDATA, causing unauthenticated PUT requests handled by src/web/api/v3/apiv3settings.c to bypass operator-configured allo...

ROS-20260922-73-0075

The vulnerability in Tomcat is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20260922-73-0014

The vulnerability in gstreamer1-plugins-bad-free is related to the implementation of incorrect control flow management. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2026-95624: Improper Access Control

The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code. When set to true, it replaces the version comparator from "update must be newer" to "update must be different." Because the default permission set grants allow-check...

CVE-2026-77251: Hardware Child Block Incorrectly Connected to Parent System

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, Jira search accepts a forbidden project clause because it checks only for the presence of project syntax, Confluence search uses an incomplete case-sensitive space check, and Jira boa...

Linux Distros Unpatched Vulnerability : CVE-2026-76151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds read buffer over-read in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0...

ROS-20260922-73-0032

The vulnerability of the aasockmsgperm function in the security/apparmor/lsm.c module of the AppArmor security component of the Linux operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrit...

PT-2026-97017

Name of the Vulnerable Software and Affected Versions Spree versions 5.4.0 through 5.4.3 Spree versions 5.5.0 through 5.5.3 Description An authenticated customer can associate an eligible guest cart with their own account and access the billing and shipping address data stored within that cart...

Oracle Java SE Unauthorized Access

The vulnerability of the components of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

NPM vm2 Access Control

The vulnerability of the NPM packet manager’s vm2 library is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

Multiple vulnerabilities in Apache Tomcat in Foundation image

CVE-2026-55276 Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through...

PT-2026-96990

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager Forms JEE affected versions not specified Description A stored Cross-Site Scripting XSS issue exists where a high-privileged attacker can inject malicious scripts into vulnerable form fields. When a victim visits the...

PT-2026-96762

Name of the Vulnerable Software and Affected Versions SGLang versions prior to 0.5.20 Description SGLang is subject to a denial of service issue due to missing input validation for AUX DATA ZeroMQ control messages within the Decode worker. An unauthenticated remote attacker with network access to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libvirt (UTSA-2024-005633)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-005633 advisory. A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a...

Malware in @vite-pro/vite-ui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @vite-mcp/vite-type

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...