PT-2026-87381

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A heap-based buffer overflow occurs in Windows NTFS, which is a common file system used for organizing and storing files on hard disk drives. This issue allows an authorized attacker to...

amazon-ssm-agent-3.3.5226.0-1.1 on GA media (moderate)

amazon-ssm-agent-3.3.5226.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11694-1 Rating: moderate Cross-References: CVE-2025-22869 CVE-2026-25934 CVE-2026-71556 CVSS scores: CVE-2025-22869 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-22869 SUSE : 8.2...

CVE-2026-86590: Server-Side Request Forgery (SSRF)

In Eclipse Che versions 7.79.0 through 7.121.0, the dashboard backend's POST /dashboard/api/data/resolver endpoint passes a caller-supplied URL directly to an outbound HTTP GET request with no host filtering. An authenticated user can exploit this server-side request forgery SSRF to read response...

CVE-2026-48707: Server-Side Request Forgery (SSRF)

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Server-Side Request Forgery SSRF vulnerability in the file upload functionality system/core/uploader.php at lines 509-532. When the "upload from URL" feature follows an HTTP redirect, the redirected...

PT-2026-87472

Out-of-bounds read in Windows Device Health Attestation DHA allows an unauthorized attacker to disclose information over a network...

PT-2026-87418

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

PT-2026-88041

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read exists in Microsoft Office, which allows an unauthorized attacker to disclose information over a network. An out-of-bounds read occurs when the software reads...

PT-2026-87319

Name of the Vulnerable Software and Affected Versions Microsoft Standard XPS affected versions not specified Description A heap-based buffer overflow occurs in Microsoft Standard XPS, which allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow is a memor...

PT-2026-87934

Name of the Vulnerable Software and Affected Versions Windows iSCSI affected versions not specified Description Weak authentication in the Windows iSCSI Target service allows an unauthorized remote attacker to bypass security restrictions over a network. Recommendations At the moment, there is no...

PT-2026-87348

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A stack-based buffer overflow occurs in Windows Win32K, which allows an authorized attacker to elevate privileges over a network. A stack-based buffer overflow is a condition where a...

PT-2026-87359

Name of the Vulnerable Software and Affected Versions Windows Device Association Broker service affected versions not specified Description A use after free issue in the Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network. Use after free is...

PT-2026-87227

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An integer overflow or wraparound occurs, which allows an unauthorized attacker to cause a denial of service over a network. An integer overflow happens when an arithmetic operation attemp...

PT-2026-87224

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an authorized attacker to disclose sensitive information over a network. An out-of-bounds read occurs when the software reads data past the end or prior to the...

PT-2026-87921

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A heap-based buffer overflow occurs in Windows Management Services, which allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow ...

PT-2026-87219

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Insufficient logging allows an authorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the moment, there is no...

PT-2026-87378

Double free in Windows Registry allows an authorized attacker to elevate privileges over a network...

EEF-CVE-2026-82757 ash_authentication_oauth2_server CIMD fetcher classifies IPv4-in-IPv6 and site-local addresses as public, allowing SSRF

Summary Server-Side Request Forgery SSRF vulnerability in ash-project ashauthenticationoauth2server allows an attacker who controls a client metadata URL and its DNS to make the server connect to internal or loopback addresses. publicip?/1 in AshAuthentication.Oauth2Server.CIMD.ReqFetcher enforce...

SUSE-SU-2026:4054-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: Update to version jdk8u504 icedtea 3.40.1. - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to sensitive data bsc1275777. - CVE-2026-61308: unauthenticated attacker...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022324)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022324 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022329)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022329 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable...