PT-2026-93200

Name of the Vulnerable Software and Affected Versions Netcore NR255-V version 1.5.130703 Description OS command argument injection occurs because the system builds root-run command lines using unquoted user-supplied DDNS input within the DDNSset cgi.c and ddns Proc.c components. Attackers can use...

PT-2026-92153

Name of the Vulnerable Software and Affected Versions IBM MQ versions 9.1.0.0 through 9.1.0.37 LTS IBM MQ versions 9.2.0.0 through 9.2.0.43 LTS IBM MQ versions 9.3.0.0 through 9.3.0.41 LTS IBM MQ versions 9.3.0.0 through 9.3.5.1 CD IBM MQ versions 9.4.0.0 through 9.4.0.25 LTS IBM MQ versions...

PT-2026-92475

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 140.16 Thunderbird versions prior to 153.3 Thunderbird versions prior to 156 Description An out-of-bounds buffer read can be triggered by a maliciously constructed IMAP line. An out-of-bounds read occurs when the...

ROS-20260915-73-0139

The vulnerability of the File Input component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260915-73-0193

The vulnerability of the New Tab Page component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity through a specially created HTML page...

ROS-20260915-73-0159

The vulnerability of Google Chrome and Microsoft Edge web browsers relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...

ROS-20260915-73-0071

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260915-73-0125

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

ROS-20260915-73-0078

The vulnerability of IndexedDB in Google Chrome and Microsoft Edge browsers is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

ROS-20260915-73-0132

The vulnerability of the InterestGroups component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260915-73-0034

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...

ROS-20260915-73-0180

The vulnerability of the StorageAccessAPI component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

ROS-20260915-73-0188

The vulnerability of the File Input component in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

ROS-20260915-73-0155

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20260915-73-0044

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

PT-2026-92300

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description Improper input validation in multiple locations allows for an out-of-bounds write, which is a condition where data is written outside the boundaries of a...

CVE-2026-47780: Improper Input Validation

free5GC is an open-source implementation of the 5G core network. In 4.2.3 and earlier, HandleCreateEeSubscriptions and HandleQueryeesubscriptions in free5gc/udr internal/sbi/apidatarepository.go validate the ueId path value with a regular expression whose final .+ alternative accepts every...

PT-2026-92358

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Improper input validation in the smmu detach dev nested function within arm-smmu-v3.c may allow a local escalation of privilege. Exploitation requires System execution privileges and doe...

PT-2026-92342

In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92366

In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...