PT-2026-71178

Name of the Vulnerable Software and Affected Versions Apache Allura versions prior to 1.19.1 Description Specifically crafted inputs may lead to git argument injection, a flaw where an attacker can insert unauthorized arguments into a git command executed by the application. Recommendations Upgra...

ROS-20260812-73-0029

The vulnerability in Wireshark is related to the lack of checks on input data for cyclic operations. Exploiting this vulnerability can allow a hacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-4757

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be...

PT-2026-75979

Impact Affected versions of Winter CMS did not validate the handler name submitted through the form postback mechanism handler POST field in the same way as AJAX requests X WINTER REQUEST HANDLER header. The AJAX path validates that handler names match the onA-Zw+ pattern, but the postback path...

PT-2026-71325

Name of the Vulnerable Software and Affected Versions IBM Informix Dynamic Server version 12.10 IBM Informix Dynamic Server version 14.10 IBM Informix Dynamic Server version 15.0 Description Improper validation of user supplied input allows an unauthenticated user to execute arbitrary commands on...

CVE-2026-69106: Improper Input Validation

A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content...

CVE-2026-73418: Improper Input Validation

NextAuth.js provides authentication for Next.js. Prior to @auth/core 0.41.3 and next-auth 4.24.15 and 5.0.0-beta.32, the exported getToken helper in the next-auth/jwt and @auth/core/jwt modules can throw an uncaught exception when it reads a malformed Authorization: Bearer header. When no session...

CVE-2026-19503: Improper Input Validation

MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC authentication may have an uncontrolled...

PT-2026-71191

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper validation of input size may allow a remote attacker to cause a denial of service. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2026-71272

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of an attacker-supplied user profile name...

PT-2026-71203

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.5 through 19.0.5 GitLab CE/EE versions 19.1 through 19.1.3 GitLab CE/EE versions 19.2 through 19.2.1 Description An issue exists where improper input validation could allow an unauthenticated user to cause a denial of...

PT-2026-71210

Name of the Vulnerable Software and Affected Versions OpenSearch Security Analytics plugin affected versions not specified Description Missing input validation in the threat intelligence feed parser allows an authenticated remote user to perform server-side request forgery SSRF—a technique where ...

PT-2026-71252

Name of the Vulnerable Software and Affected Versions multicluster engine MCE affected versions not specified Description A flaw in the cluster-curator-controller component allows a tenant with create or update permissions on ClusterCurator resources to inject an arbitrary Job specification. This...

PT-2026-71299

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 IBM Verify Identity Access Container versions 11.0 through 11.0.3 Description Improper validation of user supplied input may allo...

PT-2026-71274

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary script code due to improper neutralization of user-controlled input...

WordPress AI Engine Cross-Site Script Vulnerability

WordPress AI Engine is an official WordPress plugin developed by developer JordyMeow. It aims to seamlessly integrate mainstream large language models such as OpenAI, Anthropic, and Google into the WordPress backend, providing core features like chatbots, content generation, AI forms, and...

PT-2026-71303

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data...

FreeBSD Largepage Privilege Escalation

The vulnerability of the implementation of shared memory objects in FreeBSD’s large-page cores is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Linux Distros Unpatched Vulnerability : CVE-2026-68446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmwsurfacemetadata::arraysize This field comes from userspace and shoul...

Joomla Content Editor File Renaming

The vulnerability of the file renaming function of the Joomla Content Editor JCE in the Joomla content management system is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to create or replace arbitrary files...