CVE-2026-69720: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-69508: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-69440: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-68842: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...

CVE-2026-69890: Use After Free

Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally...

CVE-2026-16037: Observable Timing Discrepancy

Observable timing discrepancy vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Module allows Black Box Reverse Engineering. This issue affects PayTR Virtual Pos iFrame API WHMCS Module: from v9.0.0 before v9.0.3...

PT-2026-87002

Name of the Vulnerable Software and Affected Versions Siveillance Control Pro versions prior to 3.0.12.2173 Siveillance Control Pro versions prior to 4.0.9.2178 Siveillance Control versions prior to 3.0.22.2177 Siveillance Control versions prior to 4.0.11.2177 Description A flaw in the OIS web...

CVE-2026-79572

An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...

CVE-2026-79572

The Distribution Management v1.0.0 software contains an XML External Entity (XXE) vulnerability within its level-rule module . Attackers can exploit this flaw by supplying a crafted XML payload to perform unauthorized actions, such as reading sensitive files , scanning internal networks , or laun...

EUVD-2026-72910

An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...

EUVD-2026-74266

An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...

PT-2026-88906

Name of the Vulnerable Software and Affected Versions WP Plugin Crazy Domains versions prior to 2.5.3 WP Plugin Web versions prior to 2.3.5 WP Plugin Hostgator versions prior to 3.1.1 WP Plugin Bluehost versions prior to 4.17.2 wp-module-data versions prior to 2.9.5 Description Several Newfold...

CVE-2026-52486

An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...

CVE-2026-79572

An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...

PT-2026-87109

Name of the Vulnerable Software and Affected Versions PayTR Virtual Pos iFrame API WHMCS Module versions 9.0.0 through 9.0.2 Description An observable timing discrepancy exists in the PayTR Virtual Pos iFrame API WHMCS Module. This flaw allows for Black Box Reverse Engineering, a technique used t...

EulerOS 2.0 SP12 : cifs-utils (EulerOS-SA-2026-3327)

According to the versions of the cifs-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user...

Linux Distros Unpatched Vulnerability : CVE-2026-85630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the processattrs method. Any application with field...

PT-2026-87110

An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...

PT-2026-87108

Name of the Vulnerable Software and Affected Versions PayTR Virtual Pos iFrame API WHMCS Module versions 9.0.0 through 9.0.2 Description Improper validation of the specified quantity in the input allows for input data manipulation within the PayTR Virtual Pos iFrame API WHMCS Module...

CVE-2026-52486

A vulnerability exists in OpenDDS 3.33.x that allows a local attacker to trigger a denial of service (DoS). The root cause is located in the verify function within the SIgnedDocument module . While the specific technical mechanism of the failure is not detailed in the provided documents, the impa...