CVE-2026-108072

The TSplus Remote Access software is vulnerable to a flaw caused by incorrect permissions in shared login scripts. Specifically, the autostart1.tscr files in the shared themes directory can be modified by users who lack sufficient privileges. A local attacker with a valid session on the terminal ...

CVE-2026-108072 Insecure Permissions on Shared Startup Scripts Allow Cross-User Code Execution and Potential Privilege Escalation

Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, located in the shared themes directory, allow users without sufficient privileges to write to them. A local attacker with a valid session on the terminal or remote desktop server...

CVE-2026-94574

A local cross-user code execution vulnerability exists in GNU wget Windows builds from eternallybored.org due to a hardcoded configuration file path C:\msys64 that is writable by unprivileged users, allowing for arbitrary code execution via the useaskpass directive, potentially allowing local...

PT-2026-97018

Name of the Vulnerable Software and Affected Versions GNU wget Windows builds from eternallybored.org affected versions not specified Description A local cross-user code execution issue exists due to a hardcoded configuration file path at C:msys64 that can be written to by unprivileged users. Thi...