CVE-2026-102108: Deserialization of Untrusted Data

An authenticated administrator of Kiteworks Email Protection Gateway could submit a crafted serialized object to a cluster management interface that was deserialized without sufficient validation, potentially allowing arbitrary code execution in the context of the gateway service account...

PT-2026-103403

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Linux affected versions not specified Description A flaw exists in the kernel mode layer involving improper verification of cryptographic signatures. Under memory pressure, this verification process may be bypasse...

PT-2026-103419

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Windows affected versions not specified Description An issue exists in the kernel-mode escape handling that allows a local attacker to bypass an authorization check. This check is designed to restrict specific...

PT-2026-103435

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Linux affected versions not specified Description An unprivileged user can trigger a use-after-free condition, which occurs when a program continues to use a pointer after it has been freed. This could result in...

PT-2026-103365

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Windows and Linux affected versions not specified Description An unprivileged user can trigger a use-after-free condition, which occurs when a program continues to use a pointer after it has been freed. This could...

PT-2026-103411

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could inject crafted text into the kernel log because the supplied version string is not properly sanitized. A successful exploit of this vulnerability might lead to denial of service and data...

PT-2026-103442

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Windows and Linux affected versions not specified Description An unprivileged user can trigger a use-after-free condition—a scenario where the system continues to use a pointer after the memory it points to has be...

CVE-2026-47516: Use After Free

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure...

CVE-2026-47594: Use After Free

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by issuing a sequence of driver commands. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service,...

CVE-2026-47600: Use of Uninitialized Resource

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate on an improperly initialized resource. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service,...

CVE-2026-83560: Exposure of Sensitive Information to an Unauthorized Actor

The New User Approve WordPress plugin before 3.2.10 does not properly verify authentication on a set of integration REST API routes when the integration is unconfigured, allowing unauthenticated attackers to retrieve personal data id, username, email address and registration date of registered...

CVE-2026-51867

agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on tha...

CVE-2026-103237: Authorization Bypass Through User-Controlled Key

MISP contains an improper input validation vulnerability in its ORM save path. When a user submits data through various endpoints attribute add/edit, event edit, free-text import, sighting capture, shadow attribute proposal, event report creation, object reference add, user admin edit, the...

PT-2026-103115

MISP contains an improper input validation vulnerability in its ORM save path. When a user submits data through various endpoints attribute add/edit, event edit, free-text import, sighting capture, shadow attribute proposal, event report creation, object reference add, user admin edit, the...

CVE-2026-97241: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in BackupEase = 2.2.2 versions...

CVE-2026-96886: Exposure of Sensitive Information to an Unauthorized Actor

The Course Booking System WordPress plugin before 7.0.9 does not restrict access to its booking export, allowing unauthenticated users to download the name, email address and billing address of every customer who has booked a course...

CVE-2026-97302: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in MPG = 4.2.3 versions...

PT-2026-103268

Unauthenticated Sensitive Data Exposure in MPG = 4.2.3 versions...

CVE-2026-103048: URL Redirection to Untrusted Site

URL redirection to untrusted site 'open redirect' vulnerability in The Wikimedia Foundation Mediawiki - Collection extension allows Fake the Source of Data. This issue affects Mediawiki - Collection extension: before 1.46.1, 1.45.5, 1.43.10...

PT-2026-103007

The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via post content Parameter data-label DOM Sink in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output...