CVE-2026-99108

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix FITRIM range alignment ntfstrimfs aligns the start of a free extent up to the device discard granularity, but derives the discard length by aligning the original extent length down. When the free extent start is not...

PT-2026-128104

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix data corruption with concurrent writes and O TRUNC cifs do truncate flushes dirty pages with filemap write and wait and truncates the file on the server, but in the old code both operations ran without holding i...

Linux Distros Unpatched Vulnerability : CVE-2026-118176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths...

Linux Distros Unpatched Vulnerability : CVE-2026-116748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handlerequest in rpc- server.cc that exposes the X-Transmission-Session-Id anti-CSRF...

PT-2026-127313

A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6. This impacts an unknown function of the file renderers/web core/src/v0 9/rendering/data-context.ts of the component data-context Resolver. Such manipulation leads to resource consumption. The attack may be performed fro...

CVE-2026-118804: Bricks Bricks Builder: Bricks Builder 2.4.3 and before contains a broken access control vulnerability that allows unauthenticated attackers to…

Bricks Builder 2.4.3 and before contains a broken access control vulnerability that allows unauthenticated attackers to access restricted post content by submitting crafted poststatus and posttype values in the originalQueryVars parameter to the POST /wp-json/bricks/v1/queryresult REST endpoint...

CVE-2026-118803: Bricks Bricks Theme: Bricks Theme 2.4.3 and before contains an unauthenticated dynamic-data tag injection vulnerability that allows…

Bricks Theme 2.4.3 and before contains an unauthenticated dynamic-data tag injection vulnerability that allows anonymous attackers to control the urlParams object in the queryresult REST endpoint, causing the submitted value to be re-parsed as a Bricks dynamic data tag. Attackers can inject tags...

CVE-2026-105619: Missing Authorization

PostgreSQL Anonymizer doesn't mask data accessed thru a securityinvoker view. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...

CVE-2026-118613: Deserialization of Untrusted Data

Ultralytics torchload Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2026-118649: Improperly Controlled Modification of Object Prototype Attributes

n8n before 2.43.5 and 2.44.x before 2.44.1 accepts a client-supplied workflow ID and caches each workflow's owner project in memory by that ID, so a crafted ID such as proto makes the Data Table project check match every project. An authenticated member who can create and run workflows can list,...

CVE-2026-118641: Improper Neutralization of Special Elements in Data Query Logic

n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains an OData $filter injection vulnerability in the Microsoft Outlook contact lookup and Microsoft SharePoint v1 item update nodes, which build $filter string literals from expression-bindable parameters without escaping...

CVE-2026-118617: Deserialization of Untrusted Data

Ultralytics loaddatasetcachefile Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must...

CVE-2026-105612: Missing Authorization

PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked roles. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...

PT-2026-127845

The PayPlug for WooCommerce Official WordPress plugin before 3.1.1 does not perform any capability or ownership check on a set of unauthenticated AJAX actions that operate on a caller-supplied order identifier, allowing unauthenticated attackers to modify, read the contents of, and permanently...

CVE-2026-61571: WWBN AVideo-Encoder: AVideo is a video-sharing Platform

AVideo is a video-sharing Platform. Prior to 8.1.0, the encoder lacks a global authentication layer and exposes control and status PHP endpoints to anonymous network callers. view/run.php has a commented-out guard and invokes Encoder::run. view/queue.json.php calls Encoder::getAlltrue, reveals...

CVE-2026-118029: Unverified Ownership

Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas awswrangler before 3.16.1 might allow remote actors to read Athena query results and tamper with result sets returned to the caller via a pre-created S3 bucket. To remediate this issue, users...

PT-2026-127902

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted...

PT-2026-127903

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an...

PT-2026-127904

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 Dell PowerProtect Data Domain versions 7.13.1.0 through 7.13.1.80 Dell PowerProtect Data Domain versions 8.3.1.0 through 8.3.1.40 Dell PowerProtect Data Domain versions 8.6.1.0 through...

PT-2026-127913

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an...