PT-2026-86915

Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...

PT-2026-86933

Name of the Vulnerable Software and Affected Versions knowns versions prior to 0.30.0 Description Failure to validate the settings.lsp.languages binary field in project configuration files allows the execution of arbitrary binaries. An attacker can achieve this by crafting a malicious...

PT-2026-86607

In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246...

PT-2026-86608

In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245...

CVE-2026-20500: Improper Certificate Validation

In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232...

CVE-2026-20512: Improper Restriction of Excessive Authentication Attempts

In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246...

PT-2026-86596

In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232...

ROS-20260907-73-0092

The vulnerability in dotnet10.0 is related to the lack of validation for input data during cyclic operations. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2022-51015: Improper Input Validation

PocketMine-MP before 4.0.6 does not validate facing values in PlayerActionPacket for STARTBREAK and CRACKBREAK actions or in UseItemTransactionData typically within InventoryTransactionPacket. A remote authenticated attacker can send crafted packets with invalid facing values e.g., negative or...

PT-2026-86930

Name of the Vulnerable Software and Affected Versions knowns versions prior to 0.30.0 Description Insufficient validation of filesystem paths in MCP tool arguments allows attackers to perform directory traversal. By supplying path arguments containing traversal sequences, an attacker can read,...

PT-2026-86779

PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields submitted by players, allowing uncapped values to exceed the 32767 byte TAG String limit. Attackers can submit oversized skin data fields like skinID or geometryName to trigger exceptions during NBT dat...

ROS-20260907-73-0086

The vulnerability of UEFI microprogramming systems of Intel processors is related to deficiencies in input data validation. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2026-86815

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.5.46 Description Unauthenticated or weakly constrained request paths allow persistent work without adequate input bounds or rate limiting. Specifically, the '/users/forgot password-reset' endpoint accepts an...

PT-2026-86990

Name of the Vulnerable Software and Affected Versions Easy Appointments versions prior to 4.0.2.2 Description Insufficient input sanitization and output escaping lead to DOM-Based and Stored Cross-Site Scripting XSS, a condition where arbitrary web scripts are injected into pages and executed whe...

PT-2026-86873

In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log...

ROS-20260907-73-0082

The vulnerability of the XmlCli function in Intel UEFI microprocessors is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

Linux Distros Unpatched Vulnerability : CVE-2026-80882

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm Ensure the ENOMEM...

Fortinet FortiClient DNS Modification Code Execution

The vulnerability of the Fortinet FortiClient Windows security tool lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to remotely alter or forge DNS responses for the target host and execute arbitrary code using specially...

Linux Distros Unpatched Vulnerability : CVE-2026-86430

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and...

CVE-2022-51012: Improper Input Validation

PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during deserialization of inventory transaction packets from clients. Attackers can send crafted inventory transactions with malformed NBT tags to trigger server crashes and cause denial of service...