CVE-2026-70579

CVE-2026-70579 is an out-of-bounds read in Windows Mobile Broadband that allows an unauthorized, remote attacker to disclose information over a network without requiring user interaction or prior authentication. The assigned CVSS 3.1 base score is 7.5 (HIGH) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:...

CVE-2026-18851

Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin...

Security Advisory - Ivanti Endpoint Manager Mobile (CVE-2026-18851)

Summary Ivanti has released updates for Ivanti Endpoint Manager Mobile EPMM which addresses one high severity vulnerability. Successful exploitation could lead to privilege escalation. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability...

Windows Mobile Broadband Information Disclosure Vulnerability

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network...

Exploit for CVE-2026-57811

CVE-2026-57811 — Realtyna Organic IDX + WPL Real Estate Unauth...

mvt v2026.9.7

Mobile Verification Toolkit !IMPORTANT We recently merged the "v3" branch. This introduced breaking changes. If you relied on mvt output in other scripts They might have broken. More details: https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit MVT is a collection of utilitie...

CVE-2026-18851: Missing Authorization

Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin...

PT-2026-88031

Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intende...

PT-2026-87939

Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain access to sensitive resources. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user...

CVE-2026-79904: Improper Limitation of a Pathname to a Restricted Directory

Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intende...

APSB26-136 : Security update available for Adobe Photoshop Mobile

Adobe has released an update for Photoshop Mobile for Android. This update resolves important vulnerabilities that could result in security feature bypass and privilege escalation. Adobe is not aware of any exploits in the wild for any of the issues addressed in this update...

PT-2026-87814

Name of the Vulnerable Software and Affected Versions Windows Mobile Broadband affected versions not specified Description An out-of-bounds read exists in Windows Mobile Broadband, which allows an unauthorized attacker to disclose sensitive information over a network. An out-of-bounds read occurs...

CVE-2026-76196: Session Fixation

Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain access to sensitive resources. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user...

CVE-2026-70579: Out-of-bounds Read

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network...

PT-2026-87092

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager Mobile versions prior to 12.10.0.0 Ivanti Endpoint Manager Mobile versions prior to 12.9.0.2 Ivanti Endpoint Manager Mobile versions prior to 12.8.0.4 Description A missing authorization issue allows a remote...

yj_nearbyglasses v1.0.10

yjnearbyglasses attempting to detect smart glasses nearby and warn you. ⚠ WARNING! ⚠ nearby-glasses-alert.pages.dev is NOT RELATED TO MY PROJECT. Many apps in Play Store and App Store look or are even called very similar to Nearby Glasses. They seem to hijack the name and try to make a quick prof...

CLSA-2026-1788807441 TuxCare security update for jquery-mobile (1 CVE)

TuxCare rebuilt jquery-mobile to address 1 CVE. Fixed in 1.4.5-tuxcare.1...

CVE-2026-6223

Improper restriction of excessive authentication attempts vulnerability in Bahçelievler Muncipality BiHayat App allows Authentication Bypass. This issue affects BiHayat App: from 2.1.7 before 2.3...

EUVD-2026-72369

Improper restriction of excessive authentication attempts vulnerability in Bahçelievler Muncipality BiHayat App allows Authentication Bypass. This issue affects BiHayat App: from 2.1.7 through 07092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-6223

CVE-2026-6223 is a CRITICAL (CVSS 9.4) improper restriction of excessive authentication attempts vulnerability in the Bahçelievler Municipality BiHayat App (versions 2.1.7 through 07092026), allowing an OTP bypass that leads to full authentication bypass. The vector is network-based with no privi...