PT-2026-33248

Name of the Vulnerable Software and Affected Versions WinMatrix agent affected versions not specified Description A missing authentication flaw allows authenticated local attackers to execute arbitrary code with SYSTEM privileges on the local machine. This issue can lead to privilege escalation...

PT-2026-33249

The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the server...

EUVD-2026-23116

Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows local attackers to gain SYSTEM-level privileges by exploiting overly permissive filesystem ACLs on the C:\Windows\Automation directory. Attackers can modify existing automation content or place...

Barracuda RMM 安全漏洞

Barracuda RMM is a remote monitoring and management platform developed by the American company Barracuda. Versions of Barracuda RMM prior to 2025.2.2 contained security vulnerabilities. These vulnerabilities stemmed from excessive permissions in the file system access control list, which could...

Cisco Identity Services Engine（Cisco ISE）和Cisco ISE Passive Identity Connector 安全漏洞

Cisco Identity Services Engine Cisco ISE and Cisco ISE Passive Identity Connector are both products of the American company Cisco. Cisco Identity Services Engine is an Identity Services Engine ISE platform. This platform collects real-time information from networks, users, and devices, and develo...

perl: Perl threads have a working directory race condition where file operations may target unintended paths

A flaw was found in the Perl standard library threads component. This vulnerability can allow a local attacker to exploit a race condition in directory handling to access files or load code from unexpected locations...

Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Function Discovery Service fdwsd.dll allows an authorized attacker to elevate privileges locally...

PT-2026-32725

Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security VBS Enclave affected versions not specified Description An untrusted pointer dereference in the Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to locally bypass a security...

EUVD-2026-21870

Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information...

EUVD-2026-21864

Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions...

CVE-2026-21013

Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information...

CVE-2026-21010

Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions...

CVE-2026-21010

Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions...

CVE-2026-21013

Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information...

CVE-2026-21013

CVE-2026-21013 affects Galaxy Wearable before version 2.2.68.26 due to an incorrect default permission configuration, allowing local attackers to access sensitive information. The issue is described as a local-attack vector with low complexity and no user interaction required, with a medium CVSS ...

PT-2026-32271

Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information...

SAMSUNG Mobile devices 安全漏洞

Samsung Mobile devices are a series of mobile devices produced by South Korea’s Samsung Corporation, including smartphones and tablets. There are security vulnerabilities in Samsung Mobile Devices, which stem from improper input validation. These vulnerabilities may allow local attackers to trigg...

PT-2026-32268

Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions...

SAMSUNG Camera 安全漏洞

Samsung Camera is a camera application developed by South Korea’s Samsung Corporation. Versions of Samsung Camera prior to 16.5.00.28 contained a security vulnerability caused by improper access control, which could allow local attackers to access location data...

SAMSUNG Galaxy Wearable 安全漏洞

Samsung Galaxy Wearable is a wearable device developed by Samsung Electronics of South Korea, designed to connect wearable devices to your mobile devices. Versions of Samsung Galaxy Wearable prior to 2.2.68.26 contained a security vulnerability. This vulnerability stemmed from improper default...