PT-2026-80485

A flaw was found in GLib. An off-by-one error can occur in the gvs tuple is normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses instead of =, causing an out-of-bounds read of only 1 byte. This issue can cause a minor informati...

CVE-2026-65798: Numeric Truncation Error

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...

CVE-2026-62769: Numeric Truncation Error

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...

CVE-2026-73215: Uncontrolled Resource Consumption

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, turnportsallocateeven in src/apps/relay/turnports.c marks the unused odd sibling port as TPSTAKENODD for an EVEN-PORT Allocate request with reservation bit R=0 even though no RTCP socket will release it, allowin...

CVE-2026-15561: Allocation of Resources Without Limits or Throttling

A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM to an OutOfMemory error, stopping all deployments on the listener, and achieving Denial of Service...

PT-2026-70154

A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the tools = label creator permission to execute arbitrary SQL via the image name field of a patron card layout. The image name value is stored verbatim in the layout XML...

CVE-2026-66806: Off-by-one Error

Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

Cisco IOS XE Software Web Based Management Interface Denial of Service (cisco-sa-xe-webui-dos-PtAODAWW)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. - A denial of service DoS vulnerability exists in the web-based management interface of Cisco IOS XE Software due to insufficient error handling. An authenticated, remote attacker can exploit this issue,...

PT-2026-76028

Traefik's errors middleware by default forwards all original request headers to the error page service. If the error page service is in a separate trust domain, this can lead to the disclosure of sensitive information such as Authorization or Cookie headers. The fix adds an errorRequestHeaders...

CVE-2026-19418: Origin Validation Error

The referrer enforcement introduced with TYPO3-CORE-SA-2020-006 CVE-2020-11069 became ineffective in TYPO3 v13.0, where TYPO3 CMS started serving the backend and Install Tool applications from the site's main entry script instead of the dedicated typo3/ directory. Whether a request originated fro...

CVE-2026-68804: Numeric Truncation Error

Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2026-70046

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter fails to consistently handle specific error conditions. A low-privileged attacker could exploit this behavior under a non-default configuration. Successful exploitation is...

PT-2026-70366

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance ASA affected versions not specified Cisco Secure Firewall Threat Defense FTD affected versions not specified Description Insufficient error checking when processing HTTP requests in the Remote...

PT-2026-70830

Name of the Vulnerable Software and Affected Versions Coturn versions prior to 4.17.0 Description The turnports allocate even function in src/apps/relay/turn ports.c incorrectly marks the unused odd sibling port as TPS TAKEN ODD during an EVEN-PORT Allocate request when the reservation bit R is s...

PT-2026-70705

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An off-by-one error occurs when a program writes or reads one element past the end of an array, which can lead to memory corruption or information disclosure. In this case, the...

VulnCheck KEV: CVE-2026-20349

Cisco Secure Firewall Adaptive Security Appliance ASA and Secure Firewall Threat Defense FTD contain a heap inspection vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition...

CVE-2026-65797: Numeric Truncation Error

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...

Linux Distros Unpatched Vulnerability : CVE-2026-68298

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: Fix SVM leak on resv obj alloc failure in xevmcreate Commit 9e9787414882...

CVE-2026-63525: Numeric Truncation Error

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2026-72904 Firecrawl: Arbitrary file read via JSON Schema $ref expansion

Firecrawl turns entire websites into LLM-ready markdown or structured data. Prior to 2.11.32, a critical arbitrary file read vulnerability exists in Firecrawl's extraction functionality due to unsafe schema dereferencing of user-supplied JSON schemas in...