PT-2026-40711

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS affected versions not specified Description A buffer overflow in the IKEv2 processing allows an unauthenticated network-based attacker to execute arbitrary code with elevated privileges on the firewall or cause a deni...

PT-2026-40816

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A local privilege escalation issue exists in the Linux kernel networking stack, specifically within the XFRM ESP-in-TCP subsystem. The flaw originates in the skb try coalesce function an...

CVE-2026-28906

This issue was addressed through improved state management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, visionOS 26.5. An attacker may be able to track users through their IP address...

EUVD-2026-29662

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service locally...

EUVD-2026-29632

Missing release of memory after effective lifetime in Windows Internet Key Exchange IKE Protocol allows an unauthorized attacker to deny service over a network...

CVE-2026-35424

Missing release of memory after effective lifetime in Windows Internet Key Exchange IKE Protocol allows an unauthorized attacker to deny service over a network...

CVE-2026-40413 Windows TCP/IP Denial of Service Vulnerability

...

CVE-2026-40413 Windows TCP/IP Denial of Service Vulnerability

...

CVE-2026-40401 Windows TCP/IP Denial of Service Vulnerability

...

CVE-2026-40401

CVE-2026-40401 describes a null pointer dereference in Windows TCP/IP that can be exploited for local denial of service by an unauthorized attacker. The description in the sources states the vulnerability allows a local, unauthenticated denial of service, with a CVSS v3.1 base score of 7.1 (HIGH)...

CVE-2026-40415 Windows TCP/IP Remote Code Execution Vulnerability

...

CVE-2026-40414 Windows TCP/IP Denial of Service Vulnerability

...

CVE-2026-40406 Windows TCP/IP Information Disclosure Vulnerability

...

CVE-2026-40406

Technical details about CVE-2026-40406 are not publicly available in the provided documents; monitor for updates as additional specifics (affected products, root cause, fixes) may be released.

CVE-2026-40405 Windows TCP/IP Denial of Service Vulnerability

...

CVE-2026-35424 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

...

CVE-2026-35424

Technical details about CVE-2026-35424 (affected products, root cause, exploitability, and fixes) are not publicly provided in the supplied documents. Monitor for updates from official sources.

CVE-2026-35424 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

...

CVE-2026-34351 Windows TCP/IP Elevation of Privilege Vulnerability

...

CVE-2026-42260

Open-WebSearch is a multi-engine MCP server, CLI, and local daemon for agent web search and content retrieval. Prior to 2.1.7, isPublicHttpUrl / assertPublicHttpUrl in src/utils/urlSafety.ts do not recognize bracketed IPv6 literals and do not resolve DNS, which combine to allow non-blind SSRF wit...