PT-2026-76829

Name of the Vulnerable Software and Affected Versions Grafana affected versions not specified Description In deployments configured with multiple organizations, an Org Admin of a single organization can access permission data from other organizations. This occurs when calling the 'GET...

CVE-2026-51346

SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obtain sensitive information via the store functions...

EUVD-2026-60350

Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - 04/2026 allows a remote attacker to obtain sensitive information and execute arbitrary code...

EUVD-2026-60312

SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obtain sensitive information via the store functions...

PT-2026-76800

Name of the Vulnerable Software and Affected Versions phpIPAM versions prior to 1.8.2 Description An issue exists where the software fails to verify if a requested IP address belongs to the subnet for which a temporary share token was issued. In the endpoints 'app/temp share/index.php' and...

PT-2026-76682

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.1.6 Discourse versions prior to 2026.5.2 Discourse versions prior to 2026.6.1 Discourse versions prior to 2026.7.0 Description Users permitted to view group activity but restricted from seeing shared drafts can...

AlmaLinux 9 : .NET 8.0 (ALSA-2026:54574)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54574 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET Deni...

PT-2026-76856

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to leak sensitive user information...

PT-2026-76664

Name of the Vulnerable Software and Affected Versions Dell ObjectScale versions prior to 4.3.0.1 Description A Path Traversal issue exists where a low privileged attacker with local access could potentially exploit the flaw to perform information tampering. Path Traversal is a vulnerability that...

CVE-2026-67918

CVE-2026-67918 is a directory traversal vulnerability in hermes-studio v.0.6.26 , located in the validatePath() function within the api/hermes/download endpoint. A remote, unauthenticated attacker can exploit this flaw to access files and directories outside the intended folder, resulting in sens...

PT-2026-76663

Name of the Vulnerable Software and Affected Versions Dell ObjectScale versions prior to 4.3.0.1 Description A path traversal issue exists where a low privileged attacker with local access could potentially exploit the flaw to cause information disclosure. Path traversal is a method where an...

PT-2026-76647

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, insufficient Cascading Style Sheets CSS sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts. This issue exists because of insufficient fixes for...

ALSA-2026:55857 Important: .NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

The vulnerability of the Apache Tomcat application server, related to the implementation of incorrect control flow management, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Apache Tomcat application server is related to the implementation of incorrect control flow management. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

PT-2026-73268

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

PT-2026-76874

Name of the Vulnerable Software and Affected Versions Mattermost Desktop App versions prior to 6.2.2.0 Description The application fails to redact the pre-auth secret during the generation of a diagnostics report. A local attacker with access to the user's log files or diagnostics report can obta...

CVE-2026-50776

Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - 04/2026 allows a remote attacker to obtain sensitive information and execute arbitrary code...

CVE-2026-67918

Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download endpoint...

PT-2026-73266

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

PT-2026-76645

Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent Data Readable after Memory Erase vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...