PT-2026-68739

Name of the Vulnerable Software and Affected Versions OpenReception versions prior to 1.1.0 Description The GET handler at the endpoint /api/tenants/id/appointments/appointmentId fails to perform authorization checks. This allows any party with a valid appointment UUID to retrieve the full...

PT-2026-68748

Name of the Vulnerable Software and Affected Versions OpenReception versions prior to 1.0.2 Description A privilege escalation exists where a user with TENANT ADMIN permissions can promote themselves or another collaborator to a platform-wide GLOBAL ADMIN via a single PUT request. The role-update...

CVE-2026-19037: Improper Enforcement of Behavioral Workflow

A weakness has been identified in WonderTrader up to 0.9.9. This vulnerability affects the function MatchEngine::updatelob of the file src/WtBtCore/MatchEngine.cpp of the component Internal Limit Order Book Cache Handler. This manipulation causes enforcement of behavioral workflow. Remote...

CVE-2026-71446: Improper Neutralization of Input During Web Page Generation

AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedded directly into the JavaScript onclick handler used to display a stored screenshot, without context-appropriate encoding. An attacker who can cause a specially crafted URL to be...

PT-2026-68379

Name of the Vulnerable Software and Affected Versions cosmicstack-labs mercury-agent versions prior to 1.1.13 Description A remote issue exists in the run command Handler component within the PermissionManager.checkShellCommand function located in the src/capabilities/permissions.ts file...

CVE-2026-19039: Improper Neutralization of Special Elements used in a Command

A vulnerability was detected in Kino-Kafkaesque ssh-mcp-server up to 8ebbbb99b26f80ff6162fe00957c6dec73fbc5a5. Impacted is the function sshexec of the file src/index.ts of the component SSH Command Handler. Performing a manipulation of the argument host/username results in command injection. The...

PT-2026-68485

A vulnerability was detected in Kino-Kafkaesque ssh-mcp-server up to 8ebbbb99b26f80ff6162fe00957c6dec73fbc5a5. Impacted is the function ssh exec of the file src/index.ts of the component SSH Command Handler. Performing a manipulation of the argument host/username results in command injection. The...

CVE-2026-18996: Incorrect Privilege Assignment

A vulnerability has been found in cosmicstack-labs mercury-agent up to 1.1.12. This vulnerability affects the function PermissionManager.checkShellCommand of the file src/capabilities/permissions.ts of the component runcommand Handler. Such manipulation leads to incorrect privilege assignment. Th...

CVE-2026-18995: Exposure of Sensitive Information to an Unauthorized Actor

A flaw has been found in netease-youdao LobsterAI 2026.6.10. This affects the function parseMediaTokensFromText of the file src/renderer/services/artifactParser.ts of the component MEDIA Path Handler. This manipulation causes information disclosure. The attack is possible to be carried out...

PT-2026-68378

Name of the Vulnerable Software and Affected Versions netease-youdao LobsterAI version 2026.6.10 Description A flaw in the MEDIA Path Handler component allows for remote information disclosure. The issue resides within the parseMediaTokensFromText function located in the...

PT-2026-68381

Name of the Vulnerable Software and Affected Versions cosmicstack-labs mercury-agent versions prior to 1.1.13 Description An issue in the bg Command Handler component allows for incorrect authorization through manipulation. This can be triggered remotely via the Agent.handleBgCommand function...

PT-2026-68434

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the spear adc probe function within drivers/iio/adc/spear adc.c where the interrupt handler is registered using devm request irq before the st-completion variable is...

CVE-2026-64583

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: bdc: free IRQ and drain funcwakenotify before teardown The Broadcom BDC UDC driver registers its IRQ handler with devmrequestirq in bdcudcinit, so the IRQ is released by devm only after bdcremove returns. devm...

CVE-2026-64587

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Normal RX/TX interrupts are enabled later, in arcemacopen, so probe should not see interrupt delivery in the usual case. However, hardware may still present stale...

CVE-2026-48086: Improper Privilege Management

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, a TENANTADMIN promotes themselves to platform-wide GLOBALADMIN through a single PUT request. The role-update handler accepts the GLOBALADMIN enum value from any tena...

PT-2026-68483

A weakness has been identified in WonderTrader up to 0.9.9. This vulnerability affects the function MatchEngine::update lob of the file src/WtBtCore/MatchEngine.cpp of the component Internal Limit Order Book Cache Handler. This manipulation causes enforcement of behavioral workflow. Remote...

EulerOS 2.0 SP15 : curl (EulerOS-SA-2026-2879)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability, which was classified as problematic, has been found in cURL up to 8.19.0 Network Utility Software. Affected by this issue is some...

Linux Distros Unpatched Vulnerability : CVE-2026-64603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: intel-hid: Protect ACPI notify handler against recursion Since commit e2ffcda16290 ACPI: OSL: Allow Notify handlers to run on all CPUs ACPI notify...

EulerOS 2.0 SP13 : haveged (EulerOS-SA-2026-3019)

According to the versions of the haveged packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged. However, while it...

GHSA-P2RR-RVMM-C5FP Electron: Sandboxed iframes can launch external protocol handlers

Impact Requests to open external protocol URLs from web content did not take iframe sandbox restrictions into account, so a sandboxed iframe could cause an OS-registered external application to be launched. The frame's sandbox state was also not made available to the app's permission handlers. Ap...