CVE-2026-62647: Improper Input Validation

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A random number generator is used to generate security-relevant values such as session identifiers used for authentication purposes that is not initialized with a True Random Number Generator TRNG, resulting in a predictable...

CVE-2026-34223: Improper Control of Generation of Code

A vulnerability has been identified in Desigo CC ClickOnce Client V6 All versions, Desigo CC ClickOnce Client V7 All versions, Desigo CC family V8 All versions, Desigo CC family V9 All versions, Desigo CC Flex Client V6 All versions, Desigo CC Flex Client V7 All versions, Desigo CC Installed Clie...

CVE-2026-28613: Improper Input Validation

In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-55256: Improper Input Validation

In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28638: Improper Input Validation

In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55273: Improper Input Validation

In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88410

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue require...

CVE-2026-79376: Improper Input Validation

An issue in the l2caphandledata function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...

Online Store Application Code Execution

The vulnerability of the application software interface of programming platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to the lack of measures taken to neutralize special elements in the template creation mechanism...

D-Link DNS-320 File Sharing Arbitrary Command Execution

The vulnerability of the /cgi/filesharing.cgi file of the File Sharing component of the D-Link DNS-320 networking storage software is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary...

PT-2026-86948

SAP S/4HANA Intercompany Matching and Reconciliation allows a low-privileged authenticated user to inject malicious input into certain functions, which may be processed by the database without proper validation. This could allow the user to access sensitive information, resulting in high impact o...

PT-2026-88426

The Okta Access Gateway does not sanitize the application label field before including it in the generated nginx configuration file. The unsanitized value is interpolated into an nginx server block directive, resulting in execution of injected directives...

PT-2026-87724

Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network...

EulerOS 2.0 SP12 : jbig2dec (EulerOS-SA-2026-3344)

According to the versions of the jbig2dec packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafte...

NewStart CGSL MAIN 7.02 : gnupg2 Vulnerability (NS-SA-2026-0098)

The remote NewStart CGSL host, running version MAIN 7.02, has gnupg2 packages installed that are affected by a vulnerability: - In GnuPG before 2.4.9, armorfilter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. For...

PT-2026-87797

Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

ROS-20260908-73-0034

The vulnerability in Golang-X-Net is related to incorrect checking of the unsafe equivalence of input data. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary code...

PT-2026-87070

A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privileges can define a dashboard containing a malicious payload, or a victim can be socially engineered into importing a...

PT-2026-88436

Name of the Vulnerable Software and Affected Versions Okta Access Gateway affected versions not specified Description The software fails to sanitize dashboard label values before writing them into generated PHP configuration files. Because these files are automatically included during...

PT-2026-88308

Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description An improper input validation issue allows a low-privileged attacker to execute arbitrary code in the context of the current user. Exploitation requires user interaction, specifically...