PT-2026-127190

Summary An unauthenticated remote attacker can crash a running MONAILabel server or silently corrupt its medical AI inference results by uploading a single crafted DICOM file 132 KB via the REST API. The vulnerability stems from pydicom's lack of validation for Decimal String DS and Integer Strin...

PT-2026-127187

Summary A SQL Injection vulnerability exists in the Third Party Company update functionality of Dolibarr ERP/CRM. The localtax1 value parameter lt1 is concatenated directly into an SQL UPDATE statement in societe/class/societe.class.php at line 1672 without any escaping, type casting, or...

PT-2026-126403

NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, information disclosure...

Semantic MediaWiki cross-site request forgery vulnerability

Versions 3.0.0 through 7.3.1 of Semantic MediaWiki contain a cross-site request forgery vulnerability. This flaw arises because Special:SMWAdmin overwrites wpEditToken with a newly generated valid token, making it susceptible to such attacks. Attackers can trick authenticated smw-admin users into...

PT-2026-126380

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high...

PT-2026-126398

An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module Qt Core in Qt 5 and earlier impacts Qt. Under certain conditions, encoding text with QTextCodec may write outside an internal buffer. This can cause the application to crash and ma...

PT-2026-126393

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management vulnerability. A high...

Amazon Corretto Java 8.x < 8.512.08.1 Multiple Vulnerabilities

The version of Amazon Corretto installed on the remote host is 8 prior to 8.512.08.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-8-2026-Oct-20 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ...

PT-2026-127205

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 153.6 Thunderbird versions prior to 159 Description On Windows, a check designed to prevent mailbox: URLs from accessing files on remote network shares can be bypassed using extended-length UNC paths. This allows ...

PT-2026-126406

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Agent Toolkit versions 1.0 through 1.8.0 Description A missing authentication flaw allows an attacker to bypass security checks. This issue may lead to remote code execution, escalation of privileges, data tampering, denial of...

Linux Distros Unpatched Vulnerability : CVE-2026-101637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 9.7.0-9.7.3,...

ROS-20261027-73-0025

The vulnerability in openssh is related to errors in handling registration data. Exploitation of this vulnerability can be carried out remotely...

ROS-20261027-73-0090

The vulnerability in the OpenSSH cryptographic protection tool is related to insecure privilege management. Exploitation of this vulnerability allows an attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service...

WordPress Advanced Custom Fields: Extended plugin <= 0.9.2.7 - Missing Authorization to Unauthenticated Data Exposure vulnerability

Missing Authorization to Unauthenticated Data Exposure vulnerability discovered by Jay in WordPress Plugin ACF Extended versions = 0.9.2.7...

This Week in Spring - October 27th, 2026

Hi, Spring fans! Welcome to another installment of This Week in Spring , which I write from the paradise-like environs Barcelona, Spain, where I was lucky enough to be a part of the amazing Vaadin Create event today and tomorrow. It's been an amazing few days, but those few days are just a small...

PT-2026-126437

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high...

CVE-2026-116817

OpenPanel versions prior to 3.0.0 are vulnerable to a missing authentication vulnerability (CWE-306) within the Worker Bull Board . This flaw allows unauthenticated attackers to access the Bull Board dashboard via the worker HTTP port. Specifically, attackers can query the /api/queues endpoint an...

CVE-2026-116813 OpenPanel before 3.0.0 ClickHouse SQL Injection via conversion.service.ts

OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getConversion that allows project-read members and share-link holders to inject ClickHouse SQL through unescaped event names and dates. Attackers can break out of string literals in series names or startDate/endDa...

CVE-2026-116812 OpenPanel before 3.0.0 ClickHouse SQL Injection via cohort.preview profile filter

OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in cohort.service.ts that allows project-read members to inject SQL by supplying unescaped profile filter column names. Attackers can submit a cohort.preview filter whose name contains a subquery spliced into...

CVE-2026-116812

OpenPanel versions before 3.0.0 are vulnerable to a SQL injection flaw within the profileColumnAccess function in cohort.service.ts. This issue occurs because the application fails to escape profile filter column names . Project-read members can exploit this by submitting a cohort.preview filter ...