PT-2026-97684

Name of the Vulnerable Software and Affected Versions java110 MicroCommunity versions prior to 2.1 Description Remote manipulation of the fallBackSql argument within the QueryServiceSMOImpl.fallBack function of the BusinessApi.java file in the fallBack API endpoint allows for SQL injection. SQL...

PT-2026-97952

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds OOB access issue exists in the PCI power control component for tc9563. The problem occurs when parsing the integrated Ethernet MAC Endpoint node under DSP3. Because the...

PT-2026-97689

Name of the Vulnerable Software and Affected Versions TaleLin lin-cms-spring-boot versions prior to 0.2.2 Description Improper authorization occurs in the book endpoint when manipulating the ID argument within the getBook function. This issue allows a remote attacker to bypass authorization...

PT-2026-98237

Name of the Vulnerable Software and Affected Versions Docmost versions prior to 0.80.1 Description The public avatar and logo image endpoint allows an unauthenticated attacker to provide controlled fileName path segments. Because these segments are resolved against local storage without being...

CVE-2026-96881: Improper Authorization

A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Executing a manipulation can lead to improper authorization. The attac...

CVE-2026-96777: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Forma LMS up to 4.1.43. This impacts the function UserselectorAdmController::getDataTask of the file /appCore/ajax.admserver.php?r=adm/userselector/getData of the component Multi-User-Selector AJAX Endpoint. This manipulation of the argument Name causes sql...

CVE-2026-93265: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node DSP3 has an integrated Ethernet MAC Endpoint which has its own set of config registers for configuring settings such as ASPM. The Endpoint device has two...

PT-2026-97693

Name of the Vulnerable Software and Affected Versions TaleLin lin-cms-spring-boot versions prior to 0.2.2 Description Improper authorization exists in the book endpoint within the searchBook function of the src/main/java/io/github/talelin/latticy/controller/v1/BookController.java file. This flaw...

PT-2026-97823

Name of the Vulnerable Software and Affected Versions geelen mcp-remote versions 0.1.32 through 0.1.38 Description A remote attacker can obtain sensitive information, including internal configuration and values, by triggering metadata processing. The issue resides in the authorization server...

CVE-2026-97321: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The impacted element is the function GoViewDataServiceImpl.getDataBySQL of the file yudao-module-report/src/main/java/cn/iocoder/yudao/module/report/service/goview/GoViewDataServiceImpl.java of the component GoVie...

PT-2026-98194

Name of the Vulnerable Software and Affected Versions DBHub versions prior to 0.22.5 Description DBHub exposes an unauthenticated HTTP MCP endpoint when started in HTTP transport mode. The server attempts to prevent browser-origin access by verifying that the Origin hostname matches the Host...

CVE-2026-93265

In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node DSP3 has an integrated Ethernet MAC Endpoint which has its own set of config registers for configuring settings such as ASPM. The Endpoint device has two...

CVE-2026-97226: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in DbGate up to 7.2.5/7.3.1-premium-beta.1. This impacts the function fs.readFile of the file packages/api/src/controllers/files.js of the component files-style Endpoint. The manipulation of the argument filePath/uri leads to path traversal. It is possible to initia...

automation-controller: automation-controller-container: automation-controller: instance group attachment to schedules and workflow job template nodes checks only read permission, allowing use of restricted (controlplane / other-tenant) instance groups and privilege escalation to control-plane code execution

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. When attaching an instance group to a schedule or a workflow job template node through the dedicated API relationship endpoint, the controller verifies only that the requesting user can read view the instance group,...

automation-controller: automation-controller-container: automation-controller: instance group attachment to schedules and workflow job template nodes checks only read permission, allowing use of restricted (controlplane / other-tenant) instance groups and privilege escalation to control-plane code execution

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. When attaching an instance group to a schedule or a workflow job template node through the dedicated API relationship endpoint, the controller verifies only that the requesting user can read view the instance group,...

CVE-2026-84712

A flaw in the automation-controller API allows an unauthenticated attacker to access the /api/v2/ping/ health-check endpoint. This endpoint over-serializes RBAC-gated automation-mesh data into an anonymous response, exposing the full instance inventory, including node hostnames, types, UUIDs, hea...

CVE-2026-84712

A flaw was found in the automation-controller API. The unauthenticated health-check endpoint /api/v2/ping/ ApiV2PingView, AllowAny over-serializes RBAC-gated automation-mesh data into its anonymous response, exposing the full instance inventory node hostnames, node types, UUIDs, heartbeats,...

CVE-2026-84638

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. When attaching an instance group to a schedule or a workflow job template node through the dedicated API relationship endpoint, the controller verifies only that the requesting user can read view the instance group,...

EUVD-2026-44812

9router: Mass assignment in PATCH /api/settings allows authenticated authorization downgrade...

CVE-2026-88839

The BusyBox passwd/group utility contains a vulnerability in the tokenize() function where it references a stale endpoint pointer after trimming. This flaw leads to an out-of-bounds write of heap pointers. To mitigate this risk, ensure that /etc/group and /etc/passwd are writable only by root and...