PT-2026-97454

Unauthenticated Broken Access Control in WP User Manager = 2.9.19 versions...

PT-2026-97352

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description A missing authentication requirement for a critical function allows a remote attacker to access sensitive information and modify system...

CVE-2026-61413: Improper Privilege Management

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-91077: Improper Access Control

The Event Booking Manager for WooCommerce WordPress plugin before 5.7.3 does not restrict its event listing query to events the requesting user is permitted to read, so users with contributor-level access and above can retrieve other authors' private, draft and trashed events, together with event...

CVE-2026-18180: Improper Neutralization of Special Elements used in an SQL Command

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to SQL injection...

CVE-2026-18179: Missing Authorization

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper authorization...

PT-2026-97329

Name of the Vulnerable Software and Affected Versions REDAXO versions prior to 5.21.2 Description A stored cross-site scripting XSS issue exists in the REDAXO content management system. The mediaIsInUse function in redaxo/src/addons/media manager/lib/media manager.php, when invoked through the...

PT-2026-97317

Name of the Vulnerable Software and Affected Versions ManageEngine Applications Manager versions 182000 and earlier Description A low-privileged user can obtain an administrator API key, enabling them to execute actions with administrator-level privileges. Recommendations Update ManageEngine...

PT-2026-97323

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper authorization...

PT-2026-97322

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute unauthorized payment actions due to missing authorization checks...

PT-2026-97341

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.36 Description The software contains a weak encoding mechanism for passwords. A low privileged attacker with local access could exploit this issue to achieve information...

PT-2026-97194

The Booking Manager WordPress plugin before 2.1.21 does not verify that a request to modify a user's Booking Manager WordPress plugin before 2.1.21-specific settings targets the requesting user's own account, allowing any authenticated user with subscriber-level access and above to create or...

PT-2026-97340

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An issue exists where authentication is missing for a critical function. This allows an unauthenticated attacker with remote access to potentially gain...

PT-2026-97351

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description An XML external entity XXE injection flaw allows a remote attacker to obtain sensitive information. XXE is a type of attack where an...

PT-2026-97333

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description Insufficient Session Expiration allows a low privileged attacker with adjacent network access to potentially achieve elevation of privileges, bypass...

PT-2026-97342

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An issue exists where sensitive information is included in the source code. An unauthenticated attacker with remote access could exploit this to cause...

PT-2026-97353

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description An unauthenticated adjacent-network attacker can achieve remote code execution by delivering a crafted serialized payload to the PayDir...

PT-2026-97289

Name of the Vulnerable Software and Affected Versions ManageEngine OpManager versions prior to 12.8.671 ManageEngine Network Configuration Manager versions prior to 12.8.671 Description An unauthorized Path Traversal issue exists, which allows an attacker to access files and directories outside t...

PT-2026-97306

Name of the Vulnerable Software and Affected Versions ManageEngine OpManager versions prior to 12.8.711 Description An authentication bypass issue exists when the Application Manager Plugin is enabled, allowing an attacker to gain unauthorized access to the system. Recommendations Update to a...

CVE-2026-19179: Improper Neutralization of Special Elements in Output Used by a Downstream Component

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to manipulate database queries due to improper neutralization of special elements in a boolean expression...