EUVD-2026-63480

LangBot is a global IM bot platform designed for LLMs. In version 4.10.7 and earlier, any authenticated user can add or change an STDIO MCP server configuration without an adequate authorization boundary. In src/langbot/pkg/provider/tools/loaders/mcp.py, StdioServerParameters accepts the configur...

MINI-8XH7-CQ46-FFRJ

Bulletin has no description...

MINI-2X84-H83P-C75C

Bulletin has no description...

MINI-J3JQ-W7RX-5XFR

Bulletin has no description...

MINI-HWC4-M8C9-HHF8

Bulletin has no description...

CVE-2026-73849

In CVE-2026-73849, Emlog (2.6.26 and earlier) allows unauthenticated reinstall via install.php?action=reinstall. The code path bypasses the already-installed guard when act != 'reinstall', letting a remote attacker submit hostname, dbuser, dbpasswd, dbname, dbprefix, username, password, and email...

Linux Distros Unpatched Vulnerability : CVE-2026-56859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion. CVE-2026-56859 Note that Nessus relies on...

PT-2026-72074

Name of the Vulnerable Software and Affected Versions Emlog versions prior to 2.6.27 Description The install.php endpoint allows the action parameter to be set to reinstall without authentication. This bypasses the installation check because the security guard only executes when the $act variable...

PT-2026-70437

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations A...

PT-2026-70388

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue exists where the allocation of resources occurs without limits or throttling, which allows an unauthorized attacker to cause a denial-of-service condition over a network...

PT-2026-70411

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description A null pointer dereference in Windows TCP/IP allows an unauthorized attacker to cause a denial of service over a network. A null pointer dereference occurs when a program attempts to...

PT-2026-70579

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is no...

PT-2026-70073

Name of the Vulnerable Software and Affected Versions Axis Signed Video Framework affected versions not specified Description The Signed Video Framework contains a buffer overflow issue, which occurs when a program writes more data to a block of memory than it can hold. This flaw can cause...

PT-2026-70050

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter fails to sufficiently sanitize certain request headers before forwarding traffic to internal components. This allows an unauthenticated attacker to send a specially crafte...

PT-2026-70654

Name of the Vulnerable Software and Affected Versions Windows GDI affected versions not specified Description An out-of-bounds read in Windows GDI allows an authorized attacker to disclose sensitive information locally, which may affect the system. Recommendations At the moment, there is no...

PT-2026-70660

Name of the Vulnerable Software and Affected Versions Entra Connect affected versions not specified Description An elevation of privilege issue exists in Entra Connect, which could allow an attacker to gain higher-level permissions than intended. Recommendations At the moment, there is no...

PT-2026-70414

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description Weak authentication in the Microsoft Windows Search Component allows an authorized attacker to disclose sensitive information locally, which can affect the system...

PT-2026-70577

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is no...

PT-2026-70492

Name of the Vulnerable Software and Affected Versions Windows Wired AutoConfig Service affected versions not specified Description A buffer over-read in the Windows Wired AutoConfig Service allows an authorized attacker to disclose sensitive information locally, which can affect the system...

PT-2026-70076

Name of the Vulnerable Software and Affected Versions Samsung Open Source rlottie affected versions not specified Description Improper validation of the specified quantity in input allows for input data manipulation. Recommendations At the moment, there is no information about a newer version tha...