EUVD-2026-55873

SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low privileges to execute unauthorized database operations against SAP NetWeaver AS ABAP. Successful exploitation could allow the attacker to read sensitive data, modify...

EUVD-2026-55863

SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input. Exploitation also requires a legitimate user to subsequently access the attacker-influenced content and depends on condition...

CVE-2026-44758

CVE-2026-44758 affects SAP Manufacturing Integration and Intelligence (MII). The description states that an attacker with high privileges can submit specially crafted input processed without sufficient validation, potentially allowing execution of arbitrary commands on the underlying OS with high...

CVE-2026-34265 Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform

SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption. This vulnerability could potentially disclose sensitive system information or crash the system, leading to a high impact on the...

CVE-2026-34265

CVE-2026-34265 affects SAP NetWeaver Application Server ABAP (and ABAP Platform) due to memory corruption from logical errors in DIAG protocol parsing. The issue is exploitable by an unauthenticated attacker over the network and can lead to disclosure of sensitive information or system crash, wit...

PT-2026-70274

Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur...

PT-2026-70025

Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated remote attacker could access scheduling-related application functions without proper authorization validation. Successful exploitation could allow the attacker to retrieve,...

PT-2026-70758

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute code over a network. Deserialization is the process of converting a data stream back into an...

PT-2026-70023

Name of the Vulnerable Software and Affected Versions SAP Manufacturing Integration and Intelligence affected versions not specified Description Insufficient file path validation in certain functions allows a privileged attacker to use specially crafted input to write files outside the intended...

PT-2026-70650

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

PT-2026-70594

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An issue exists where the inclusion of functionality from an untrusted control sphere allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, there...

Joomla Fabrik 4.6.6 Remote Code Execution

A proof of concept exploit for an unauthenticated remote code execution vulnerability in Fabrik version 4.6.6. The vulnerability exists in the Joomla Fabrik component's calc element, where attacker-controlled request values can be substituted directly into a site-defined formula that is...

PT-2026-70042

Name of the Vulnerable Software and Affected Versions SAP Social intelligence affected versions not specified Description An authenticated attacker can exploit an SQL Injection flaw to inject SQL DDL Data Definition Language strings directly into the underlying database without additional...

PT-2026-70577

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is no...

PT-2026-70313

Improper privilege management for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable escalation of privilege...

PT-2026-70324

Heap-based buffer overflow for the IntelR Open Volume Kernel Library IntelR Open VKL library maintained by intelR before version 2.0.2 within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may...

PT-2026-70021

Name of the Vulnerable Software and Affected Versions SAP Manufacturing Integration and Intelligence MII affected versions not specified Description An attacker with high privileges can submit specially crafted input to certain functionality that is processed without sufficient validation. This...

Microsoft Edge 150.0.4078.48 Type Confusion

Microsoft Edge version 150.0.4078.48 suffers from a type confusion vulnerability. Exploit Title: Microsoft Edge 150.0.4078.48 - RCE CVE: CVE-2026-58289 Date: 2026-07-10 Exploit Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity Author GitHub:...

PT-2026-70024

Name of the Vulnerable Software and Affected Versions SAP Manufacturing Integration and Intelligence affected versions not specified Description A missing authorization check allows an unauthenticated attacker to access backend operations by sending crafted requests to the 'Cost Servlet' endpoint...

Security Update for Microsoft Power BI Report Server (August 2026)

The Microsoft Power BI Report Server on the remote host is missing the February 2026 security update. It is, therefore, affected by an RCE vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 809...