PT-2026-106368

Unauthenticated Sensitive Data Exposure in Xserver Migrator = 1.6.6 versions...

Linux Distros Unpatched Vulnerability : CVE-2026-59782

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The JavaScript preprocessing Duktape engine on Zabbix server has a vulnerability where a limited administrator is able to read raw heap data potentially resulti...

PT-2026-106859

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An uninitialized resource in the Media component allows a remote attacker to obtain cross-origin data, which is data from a different origin than the one serving the page, by using a...

PT-2026-106933

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in DevTools allows a remote attacker to leak cross-origin data through the use of a crafted HTML page and social engineering. Recommendations Update Google Chrom...

PT-2026-106950

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the Animation component that allows a remote attacker to leak cross-origin data by using a crafted HTML page. Cross-origin data leakage occurs when a websi...

PT-2026-106997

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An incorrect reference resolution in Core allows a remote attacker to leak cross-origin data through the use of a crafted HTML page and social engineering. Recommendations Update Google...

PT-2026-107070

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Media component allows a remote attacker to leak cross-origin data, which is information from a different origin than the one serving the page, by using a...

Linux Distros Unpatched Vulnerability : CVE-2026-93319

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to...

PT-2026-106332

Name of the Vulnerable Software and Affected Versions Sitemovr versions prior to 1.0.2 Description An issue exists that allows unauthenticated users to access sensitive data. Recommendations Update to a version newer than 1.0.1...

PT-2026-107288

Name of the Vulnerable Software and Affected Versions NVIDIA Model-Optimizer affected versions not specified Description An issue exists where an attacker may cause deserialization of untrusted data. Deserialization is the process of converting a data format, such as JSON or XML, back into an...

PT-2026-106756

Name of the Vulnerable Software and Affected Versions @langchain/redis versions prior to 1.1.1 Description @langchain/redis fails to escape attacker-controlled values used in structured RediSearch TAG and TEXT filters. This allows the injection of RediSearch syntax to alter or broaden the generat...

React Router Vulnerable to Cross-Site Scripting (XSS) via Redirect Location Mishandling (CVE-2026-22029)

React Router is a router for React. In @remix-run/router version prior to 1.23.2 and react-router 7.0.0 through 7.11.0, React Router and Remix v1/v2 SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs...

CVE-2026-103007: Incorrect Authorization

Incorrect Authorization CWE-863 in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege whose scope is not fully enforced during authorization checks. Elasticsearch contains an incorrect authorization weakness in a configurable, non-default privilege that lets a...

ROS-20261006-73-0187

The vulnerability in the kernel-lt is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2026-102407: Incorrect Authorization

Incorrect Authorization CWE-863 in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user with sufficient privileges over a single resource could use the Modify Data Streams API to modify a data...

CVE-2026-106184: Use of Uninitialized Resource

Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

PT-2026-107143

An insecure direct object reference IDOR vulnerability in a CloudVision CUE file-serving interface may allow an authenticated network user, under specific attack conditions, to access another user's transient data...

CVE-2026-94293: Missing Authentication for Critical Function

An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints...

CVE-2026-39791: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing = 6.2.3 versions...

PT-2026-106892

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in Google Lens allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page. Cross-origin data leakage...