PT-2026-112399

Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-83521: Out-of-bounds Read

Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network...

CVE-2026-88099: Uncaught Exception

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network...

CVE-2026-69651: Inefficient Algorithmic Complexity

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-88155: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-105713: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network...

PT-2026-112350

Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network...

PT-2026-111614

The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and...

PT-2026-111627

Name of the Vulnerable Software and Affected Versions NETGEAR RAX/CAX series models affected versions not specified Description An insufficient input validation issue exists in the website blocking feature Block Sites. This allows a network-adjacent attacker with network access, such as WiFi...

PT-2026-111631

Name of the Vulnerable Software and Affected Versions NETGEAR R7000 affected versions not specified Description Insufficient input validation in the time server NTP setting allows an attacker with administrator credentials and local network access to execute unauthorized commands on the router...

PT-2026-111590

A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt communication, cause device faults, and affect open TCP and UDP ports. A power cycle is required to recover the device to it...

PT-2026-111822

SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication...

PT-2026-112000

Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...

PT-2026-112010

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description An issue in Active Directory Federation Services allows an unauthorized attacker to perform spoofing over a network, which enables them to affect the system...

PT-2026-111997

Name of the Vulnerable Software and Affected Versions Windows Distributed File System DFS affected versions not specified Description An untrusted pointer dereference in Windows Distributed File System DFS allows an unauthorized attacker to elevate privileges over a network. Recommendations At th...

PT-2026-112028

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network...

PT-2026-111885

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

PT-2026-111888

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

PT-2026-111938

Name of the Vulnerable Software and Affected Versions Visual Studio Code versions prior to 1.141.1 Description An issue exists where improper limitation of a pathname to a restricted directory, known as path traversal, allows an unauthorized attacker to execute code over a network. Path traversal...

PT-2026-111936

Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description Reliance on untrusted inputs in a security decision allows an unauthorized attacker to bypass the Workspace Trust security feature over a network. Workspace Trust is designed to...