PT-2026-127181

Name of the Vulnerable Software and Affected Versions Neko versions 3.0.0 through 3.1.4 Description Neko deployments using legacy mode with session.implicit hosting enabled contain a logic error in the LegacyIsHost function. This causes the legacy WebRTC data-channel to incorrectly authorize inpu...

NVIDIA TensorRT-LLM server request forgery vulnerability

NVIDIA TensorRT-LLM version 1.3.0rc24 contains a server-side request forgery vulnerability. This vulnerability arises from susceptibility to server-side request forgery attacks, potentially leading to information disclosure and data tampering...

PT-2026-126642

An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticated attacker with access to the management SSH interface to extract sensitive configuration data by submitting a specially crafted request...

WatchGuard Fireware OS input validation error vulnerability

Security vulnerabilities exist in WatchGuard Fireware OS versions from 12.0 up to and including 12.12.4, as well as versions from 2025.1 up to and including 2026.4. These vulnerabilities stem from XPath injection during SSH authentication. Remote unauthenticated attackers capable of accessing the...

Linux Distros Unpatched Vulnerability : CVE-2026-116540

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssltlsextticketkeycb during session ticket...

Linux Distros Unpatched Vulnerability : CVE-2026-65627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Handling of Highly Compressed Data Data Amplification vulnerability in potatosalad jose erlang-jose allows a remote attacker to exhaust a node's memory...

PT-2026-127190

Name of the Vulnerable Software and Affected Versions MONAI versions prior to 1.6.1 Description An unauthenticated remote attacker can cause a denial of service or silent data corruption by uploading a crafted DICOM file via the REST API. The issue occurs because the PydicomReader. get affine...

NVIDIA NeMo Agent ToolKit authorization issue vulnerability

Versions 1.0 through 1.8.0 of the NVIDIA NeMo Agent ToolKit contain an authorization issue vulnerability stemming from missing authentication. This vulnerability may lead to code execution, privilege escalation, data tampering, denial of service, and information leakage...

Lobster_pro 4.12.12-LTS Token Replay / Privilege Escalation

Lobsterpro version 4.12.12-LTS and potentially other versions prior to 25.1.3 suffer from a privilege escalation vulnerability due to allowing use of non-privileged access to achieve administrative access. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Privilege escalation via request replaying ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146323)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146323 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses ...

ROS-20261027-73-0052

The vulnerability in Tomcat 10 is related to errors in handling length parameters of input data. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

PT-2026-126439

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Relative Path Traversal vulnerability. A high privilege...

Dell PowerProtect Data Domain buffer error vulnerability

Versions 7.7.1.0 through 8.7 of Dell PowerProtect Data Domain, versions 7.13.1.0 through 7.13.1.80 of LTS2024, versions 8.3.1.0 through 8.3.1.40 of LTS2025, and versions 8.6.1.0 through 8.6.1.20 of LTS2026 contain a buffer error vulnerability. This vulnerability stems from a stack buffer overflow...

ROS-20261027-73-0095

The Media component vulnerability in Google Chrome is related to insecure privilege management. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

Vulnerability related to permission and access control issues in Dell PowerProtect Data Domain

Vulnerabilities related to permission and access control exist in Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7, 7.13.1.0 through 7.13.1.80, 8.3.1.0 through 8.3.1.40, and 8.6.1.0 through 8.6.1.20. These vulnerabilities stem from improper access control and can be exploited by...

WatchGuard Fireware OS path traversal vulnerability

Security vulnerabilities exist in WatchGuard Fireware OS versions from 2025.1 up to and including 2026.4, as well as versions from 12.0 up to and including 12.12.4 and from 12.0 up to and including 12.5.22. These vulnerabilities stem from a link-following issue in the firewall daemon. Local...

Vulnerability related to permission and access control issues in Dell PowerProtect Data Domain

Versions 7.7.1.0 through 8.7 of Dell PowerProtect Data Domain, LTS2024 versions 7.13.1.0 through 7.13.1.80, LTS2025 versions 8.3.1.0 through 8.3.1.40, and LTS2026 versions 8.6.1.0 through 8.6.1.20 contain a privilege escalation vulnerability related to permission management and access control. Th...

PT-2026-126393

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management vulnerability. A high...

Mozilla Thunderbird security vulnerabilities

A security vulnerability exists in Mozilla Thunderbird versions prior to 159 and prior to Thunderbird 153.6. It arises because the check for mailbox: URL access to a remote Windows network share can be bypassed via an extended length UNC path. This may lead to connection to a SMB server chosen by...

CVE-2026-118132: Undefined Security Weakness

NextChat version 2.16.1 contains a client‑side cross‑site scripting XSS vulnerability in the Plugin Editor due to unsafe rendering of externally supplied OpenAPI plugin schema content. When a plugin schema is loaded from a remote URL, the returned content is stored in plugin.content and later...