PT-2026-70544

Name of the Vulnerable Software and Affected Versions Windows LDAP affected versions not specified Description A use after free issue in the Lightweight Directory Access Protocol LDAP allows an unauthorized attacker to execute arbitrary code over a network, potentially affecting the system...

PT-2026-70661

Name of the Vulnerable Software and Affected Versions Visual Studio Code CoPilot Chat Extension affected versions not specified Description An unauthorized attacker can bypass a security feature over a network within the Visual Studio Code CoPilot Chat Extension. Recommendations At the moment,...

PT-2026-70664

Name of the Vulnerable Software and Affected Versions Windows iSCSI Target Service affected versions not specified Description A null pointer dereference in the Windows iSCSI Target Service allows an unauthorized attacker to cause a denial of service over a network. A null pointer dereference...

PT-2026-70539

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A use after free issue in Windows DNS allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Use after free is a memory corruption flaw that...

PT-2026-70279

Name of the Vulnerable Software and Affected Versions IntelR AMT and IntelR Standard Manageability affected versions not specified Description An issue in the subsystem for IntelR AMT and IntelR Standard Manageability allows the insertion of sensitive information into log files, which may lead to...

PT-2026-70555

Name of the Vulnerable Software and Affected Versions Microsoft QUIC affected versions not specified Description A use after free issue in Microsoft QUIC allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use after free is a memory corruption fl...

PT-2026-70232

Name of the Vulnerable Software and Affected Versions NETGEAR Nighthawk affected versions not specified Description A command injection flaw allows a network-adjacent attacker who can intercept and modify local network traffic attacker-in-the-middle to compromise the confidentiality and integrity...

PT-2026-70567

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description A relative path traversal issue allows an authorized attacker to disclose sensitive information over a network. Path traversal is a technique that allows an attacker to...

PT-2026-70412

Name of the Vulnerable Software and Affected Versions Microsoft High Performance Computing HPC Pack affected versions not specified Description Execution with unnecessary privileges allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...

PT-2026-70396

Server-side request forgery ssrf in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network...

PT-2026-70436

Name of the Vulnerable Software and Affected Versions Windows Network Connection Broker affected versions not specified Description A double free issue in the Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. A double free occurs when the system attemp...

PT-2026-70651

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Deserialization is the process of...

PT-2026-70570

Name of the Vulnerable Software and Affected Versions Azure Entra ID affected versions not specified Description Insufficient verification of data authenticity allows an authorized attacker to perform spoofing over a network. Recommendations At the moment, there is no information about a newer...

PT-2026-70693

Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network...

PT-2026-70848

An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influence which authentication mechanism is used when one replica set member connects to another. Under certain conditions, this could cause the cluster's shared internal credential to ...

PT-2026-70100

Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch misp event and /misp search events endpoints. The URL validation routine checked whether a supplied hostname was itself an IP literal and rejected private, loopback, link-local, or reserved IPs. However, ordinary domai...

PT-2026-70424

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A race condition occurs when concurrent execution using a shared resource lacks proper synchronization. This allows an unauthorized attacker to execute arbitrary code over a...

PT-2026-70565

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

PT-2026-70606

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Deserialization is the process of...

PT-2026-70239

Name of the Vulnerable Software and Affected Versions NETGEAR R7000 affected versions not specified Description Insufficient input validation allows authenticated administrators connected to the local network to make unauthorized modifications to the router software and functionality...