PT-2026-70285

Name of the Vulnerable Software and Affected Versions IntelR NPU Driver affected versions not specified Description Improper buffer restrictions within Ring 3 the least privileged level of the CPU architecture for User Applications may allow a denial of service. An unprivileged software adversary...

PT-2026-70044

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform Admin Tools affected versions not specified Description Insufficient authorization checks in certain administrative functionality allow an authenticated non-administrative user to bypass...

PT-2026-70039

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter fails to enforce sufficient flow control in certain functionality. A low-privileged attacker can send high volumes of data without consuming responses, leading to unbounde...

PT-2026-70304

Improper conditions check in the firmware for the IntelR NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may...

PT-2026-70298

Improper conditions check for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

PT-2026-70274

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description Improper handling of values within Ring 0 the most privileged level of the CPU, used by the Kernel, Hypervisor, and Bare Metal OS may allow an escalation of privilege. A privileged...

PT-2026-70335

Integer overflow in the UEFI firmware for the IntelR Slim Bootloader may allow an information disclosure. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack...

PT-2026-70801

Incomplete cleanup in some UEFI firmware for some IntelR reference platforms within UEFI may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when...

PT-2026-70305

Out-of-bounds read for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local...

PT-2026-70301

Improper conditions check for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent...

PT-2026-70108

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

PT-2026-70036

Name of the Vulnerable Software and Affected Versions SAP ABAP Platform affected versions not specified Description An unauthenticated user can send a specially crafted request to an internal component. This action may result in the disclosure of limited, non-sensitive data from previously used...

PT-2026-70047

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter does not enforce cross-site request forgery CSRF protection on the authentication flow by default. CSRF is a type of attack that tricks a victim into submitting a maliciou...

PT-2026-70031

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter fails to sufficiently validate tenant context in inbound requests. This allows an unauthenticated attacker to send specially crafted requests to spoof the tenant context,...

PT-2026-70029

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description The WebSocket component of SAP Approuter fails to perform sufficient authorization checks within certain functionality. This allows an attacker with low privileges to access restricted...

PT-2026-70046

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter fails to consistently handle specific error conditions. A low-privileged attacker could exploit this behavior under a non-default configuration. Successful exploitation is...

PT-2026-70291

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software affected versions not specified Description Improper conditions check within Ring 2 device drivers may allow a network adversary to cause a denial of service. This issue can be triggered by an unauthenticat...

PT-2026-70288

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description An improper conditions check within Ring 2: Device Drivers may allow a network adversary to cause a denial of service. This issue can be triggered by ...

Intel® Slim Bootloader Advisory

Summary: Potential security vulnerabilities in the Intel® Slim Bootloader may allow denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-28729 Description: Integer overflow in the UEFI...

PT-2026-70303

Uncontrolled resource consumption for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may...