CVE-2026-94079: Missing Authorization

Unauthenticated Broken Access Control in WP User Manager = 2.9.19 versions...

PT-2026-97454

Unauthenticated Broken Access Control in WP User Manager = 2.9.19 versions...

PT-2026-97322

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute unauthorized payment actions due to missing authorization checks...

PT-2026-97351

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description An XML external entity XXE injection flaw allows a remote attacker to obtain sensitive information. XXE is a type of attack where an...

PT-2026-97333

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description Insufficient Session Expiration allows a low privileged attacker with adjacent network access to potentially achieve elevation of privileges, bypass...

PT-2026-97342

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An issue exists where sensitive information is included in the source code. An unauthenticated attacker with remote access could exploit this to cause...

PT-2026-97289

Name of the Vulnerable Software and Affected Versions ManageEngine OpManager versions prior to 12.8.671 ManageEngine Network Configuration Manager versions prior to 12.8.671 Description An unauthorized Path Traversal issue exists, which allows an attacker to access files and directories outside t...

PT-2026-97340

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An issue exists where authentication is missing for a critical function. This allows an unauthenticated attacker with remote access to potentially gain...

CVE-2026-18184: Improper Restriction of XML External Entity Reference

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to an XML external entity XXE injection flaw...

PT-2026-97193

Name of the Vulnerable Software and Affected Versions Booking Manager WordPress plugin versions prior to 2.1.21 Description Authenticated users with Author-level access and above can perform SQL injection attacks. This occurs because the plugin fails to sanitize and escape values retrieved from a...

PT-2026-97334

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An improper certificate validation issue exists where an unauthenticated attacker with adjacent network access can exploit the flaw. This may result in...

PT-2026-97312

Name of the Vulnerable Software and Affected Versions ManageEngine Applications Manager versions 182200 and earlier Description A permissions validation issue exists that allows low-privileged users to execute administrator-configured MBean actions on monitors outside their assigned scope. MBeans...

PT-2026-97364

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Missing authentication on the Business Rules Manager commands REST endpoint allows a local actor to invoke unauthenticated commands. This ca...

PT-2026-97349

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description A SQL injection flaw exists that could allow a remote authenticated attacker to obtain sensitive information. SQL injection is a technique...

PT-2026-97483

Subscriber Cross Site Scripting XSS in PixelYourSite – Your smart PIXEL TAG Manager = 11.4.1 versions...

PT-2026-97341

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.36 Description The software contains a weak encoding mechanism for passwords. A low privileged attacker with local access could exploit this issue to achieve information...

PT-2026-97329

Name of the Vulnerable Software and Affected Versions REDAXO versions prior to 5.21.2 Description A stored cross-site scripting XSS issue exists in the REDAXO content management system. The mediaIsInUse function in redaxo/src/addons/media manager/lib/media manager.php, when invoked through the...

PT-2026-97350

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description A hard-coded cryptographic key in the software allows a remote attacker to bypass authentication and gain access to sensitive information...

CVE-2026-18181: Use of Hard-coded Cryptographic Key

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to bypass authentication and access sensitive information due to a hard-coded cryptographic key...

PT-2026-97352

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description A missing authentication requirement for a critical function allows a remote attacker to access sensitive information and modify system...