PT-2026-107929

Name of the Vulnerable Software and Affected Versions Visual Composer Website Builder versions prior to 45.16.3 Description An issue exists in the Visual Composer Website Builder where missing authorization allows the exploitation of incorrectly configured access control security levels...

PT-2026-107927

Name of the Vulnerable Software and Affected Versions Event Tickets versions prior to 5.30.0.1 Description Missing authorization allows the exploitation of incorrectly configured access control security levels. Recommendations Update Event Tickets to version 5.30.0.1 or later...

ROS-20261008-73-0186

The vulnerability in the kernel-lt is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20261008-73-0182

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-78663: Multiple Operations on Resource in Single-Operation Context

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

PT-2026-108312

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The HTTP/2 server incorrectly refunds connection-level flow control twice for the same data. This occurs when a client resets a stream, refunding data for the...

CVE-2026-78663: Multiple Operations on Resource in Single-Operation Context

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

PT-2026-107777

An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual socke...

PT-2026-115068

Name of the Vulnerable Software and Affected Versions OpenPrinting CUPS versions prior to 2.4.20 Description The cupsdCreateJob option-string builder in scheduler/job.c maps attacker-controlled destination-uri and pre-dial-string values from a configured fax queue to the phone and faxPrefix...

PT-2026-108181

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2.2 Description Sensitive credential material is exposed during the rotation processing of SECRET and API KEY. The edge-controller and edge-manager components log this information at the INFO level. An...

Apache Artemis Authentication Bypass

The vulnerability of asynchronous messaging systems like Apache ActiveMQ and Apache Artemis lies in the lack of authentication for critical functions. Exploiting this vulnerability can allow a malicious actor to gain full control over the application...

VulnCheck KEV: CVE-2015-3306

ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...

ROS-20261008-73-0303

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-108102

Name of the Vulnerable Software and Affected Versions Malcolm affected versions not specified Description An inconsistency in URL path normalization exists between the Lua-based role-based access control RBAC authorization layer and the nginx request routing logic in the reverse proxy. An...

ROS-20261008-73-0176

The vulnerability in the kernel-lt is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Microsoft SQL Server Privilege Escalation

The vulnerability of the Microsoft SQL Server database management system is related to deficiencies in access control mechanisms. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

EulerOS 2.0 SP15 : unbound (EulerOS-SA-2026-3955)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'viewlocaldata' and 'viewlocaldatas' commands of 'unbound-control' create a bare loca...

EulerOS 2.0 SP15 : unbound (EulerOS-SA-2026-4021)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'viewlocaldata' and 'viewlocaldatas' commands of 'unbound-control' create a bare loca...

Microsoft SQL Server Privilege Escalation

The vulnerability of the Microsoft SQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

ProFTPD Improper Access Control Vulnerability

ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...