PT-2026-70050

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter fails to sufficiently sanitize certain request headers before forwarding traffic to internal components. This allows an unauthenticated attacker to send a specially crafte...

PT-2026-70579

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is no...

PT-2026-70492

Name of the Vulnerable Software and Affected Versions Windows Wired AutoConfig Service affected versions not specified Description A buffer over-read in the Windows Wired AutoConfig Service allows an authorized attacker to disclose sensitive information locally, which can affect the system...

PT-2026-70577

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is no...

PT-2026-70688

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description An issue in Windows DNS allows an authorized attacker to elevate privileges locally, which can enable them to affect the system. Recommendations At the moment, there is no information abo...

PT-2026-70416

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description The use of an uninitialized resource in the Windows Event Logging Service allows an authorized attacker to disclose information locally. Recommendations At the moment,...

PT-2026-70452

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description A use-after-free condition in the Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

PT-2026-70660

Name of the Vulnerable Software and Affected Versions Entra Connect affected versions not specified Description An elevation of privilege issue exists in Entra Connect, which could allow an attacker to gain higher-level permissions than intended. Recommendations At the moment, there is no...

PT-2026-70076

Name of the Vulnerable Software and Affected Versions Samsung Open Source rlottie affected versions not specified Description Improper validation of the specified quantity in input allows for input data manipulation. Recommendations At the moment, there is no information about a newer version tha...

PT-2026-70414

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description Weak authentication in the Microsoft Windows Search Component allows an authorized attacker to disclose sensitive information locally, which can affect the system...

PT-2026-70027

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server Java Adobe Document Service affected versions not specified Description The Adobe Document Service component uses outdated open source cryptographic and data transfer libraries. A low-privileged authenticated...

PT-2026-70024

Name of the Vulnerable Software and Affected Versions SAP Manufacturing Integration and Intelligence affected versions not specified Description A missing authorization check allows an unauthenticated attacker to access backend operations by sending crafted requests to the 'Cost Servlet' endpoint...

PT-2026-70071

Name of the Vulnerable Software and Affected Versions Device Configuration Framework affected versions not specified Description An authentication bypass flaw exists within the Device Configuration Framework. This issue can be exploited by an attacker who has already authenticated using a service...

PT-2026-70030

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter fails to properly handle certain requests under specific conditions. An unauthenticated attacker can send specially crafted input that causes the component to crash and...

PT-2026-70484

Name of the Vulnerable Software and Affected Versions User-Mode Power Service UMPS affected versions not specified Description Insufficient granularity of access control in the User-Mode Power Service UMPS allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

PT-2026-70436

Name of the Vulnerable Software and Affected Versions Windows Network Connection Broker affected versions not specified Description A double free issue in the Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. A double free occurs when the system attemp...

CVE-2026-68121

creationtimestamp| type| source ---|---|--- 2026-08-10 17:13:54+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msqlxcqkyu22 2026-08-10 17:13:57+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117072332979193830...

PT-2026-69992

Name of the Vulnerable Software and Affected Versions TP-Link Aginet affected versions not specified Description Insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations. This flaw enables an attacker to perform administrative actions...

PT-2026-69993

Name of the Vulnerable Software and Affected Versions TP-Link Aginet affected versions not specified Description Certain devices use hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data. An attacker with access to the device storage can recover these keys ...

PT-2026-69893

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the file format plugins, specifically those handling PSD and PAA files. A remote attacker can exploit this by tricking a user into opening a specially crafted image file, which...