PT-2026-80647

Summary Lemur's destination read endpoints -- GET /api/1/destinations and GET /api/1/destinations/ -- return the full set of stored plugin option values to any authenticated user, with no authorization check and no redaction of secret-bearing options. The sibling write endpoints POST/PUT/DELETE a...

PT-2026-80675

Summary The /v1/completions request model accepts prompt as a list of text prompts or a list of token-id prompts without any outer prompt-count bound. The serving path turns each element into a separate engine input, creates one engine generator per element, merges all generators, and allocates a...

PT-2026-78503

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.9.0 until 4.10.4 and 4.14.6, PUT /security/users/user id in api/api/controllers/security controller.py passes request.get"user" instead of request.context'token info''sub' as current user. remove...

PT-2026-78717

Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.137.Final Netty versions prior to 4.2.17.Final Description An issue exists in the decode function of io.netty.handler.ssl.SslClientHelloHandler where an incorrect offset is checked before reading the four-byte TLS...

CVE-2026-75595: Improper Check for Unusual or Exceptional Conditions

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandlerdecode checks the wrong offset before reading the four-byte TLS handshake header, so a ClientHello whose handshake header spans records can cause...

PT-2026-80661

Summary MobSF's Android App Link assetlinks checker validates only the manifest android:host value with valid host, but then appends the separate android:port value into the URL used for the server-side request. This bypasses the current port restriction in valid host and lets a crafted APK cause...

SUSE SLES15 Security Update : kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6, virt-pr-helper-container-1.6, virt-synchronization-controller-container-1.6 (SUSE-SU-2026:3630-1)

"The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3630-1 advisory. - CVE-2025-47911: golang.org/x/net/html: algorithms that have quadratic complexity when parsing HTML documents allow for denial of...

CVE-2026-76850: Deserialization of Untrusted Data

LMDeploy deserializes disaggregated-serving peer messages with pickle. The handlezmqrecv coroutine in lmdeploy/pytorch/disagg/conn/engineconn.py reads peer-to-peer cache-free requests with recvpyobj, which deserializes the received bytes with pickle.loads, and the isinstance check against...

Agentic AI for Safety-Critical Multi-Drone Systems: Challenges and Opportunities

Multi-drone systems are increasingly positioned for safety-critical missions such as search and rescue SAR and critical infrastructure monitoring. Yet, real-world adoption remains constrained not only by autonomy performance, but by the difficulty of integrating agentic behavior into professional...

PT-2026-80651

Summary Repo under test: https://github.com/Netflix/lemur PUT /api/1/certificates//revoke authorizes the caller against the Lemur database row creator == current user, or CertificatePermission over the row's roles rather than the underlying CA-side certificate identity. Separately, POST...

PT-2026-83512

GeoLens 1.2.4 fixes a set of vulnerabilities, the most serious of which allow authenticated or anonymous users to obtain data and metadata for datasets they are not authorized to access. Impact - Private record metadata disclosure. Record contact, keyword, and distribution sub-resource endpoints...

PT-2026-79522

CVE ID :CVE-2026-19561 Published : Aug. 19, 2026, 10:20 p.m. | 29 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2026-78835

LMDeploy deserializes disaggregated-serving peer messages with pickle. The handle zmq recv coroutine in lmdeploy/pytorch/disagg/conn/engine conn.py reads peer-to-peer cache-free requests with recv pyobj, which deserializes the received bytes with pickle.loads, and the isinstance check against...

CVE-2026-49289: Uncontrolled Resource Consumption

The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. In 4.19.2 and 4.20.2, the library permits attacker-controlled XPath transforms while processing XML signatures in specially crafted SAML messages. XPath evaluation can consume uncontrolled processing resources,...

PT-2026-79520

CVE ID :CVE-2026-18502 Published : Aug. 19, 2026, 10:20 p.m. | 29 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2026-80670

Summary sqlparse ships hard limits MAX GROUPING DEPTH=100, MAX GROUPING TOKENS=10000 intended to bound parsing work on attacker-supplied SQL, but the path that reaches those limits is itself Ondepth per token-group construction. A 1-2 KB SQL payload e.g. SELECT 1 ... with 500-2000 nesting levels,...

PT-2026-80652

Summary The fix for GHSA-v2wp-frmc-5q3v added validate acme url to reject acme url values not in ACME DIRECTORY HOST ALLOWLIST, but the validation is only called at authority creation time POST. The authority update endpoint PUT /api/1/authorities/ accepts and stores arbitrary options -- includin...

Malicious code in @library-dev-team/data-sanitizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec70432fa5463156a41cb4031ccdd89aa76b724eaac0c6e8e61949cb18403d02 The package's main entrypoint runs an unconditional IIFE at require time that reads .env from the current working directory and extracts values label...

MAL-2026-14160 Malicious code in @library-dev-team/data-sanitizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec70432fa5463156a41cb4031ccdd89aa76b724eaac0c6e8e61949cb18403d02 The package's main entrypoint runs an unconditional IIFE at require time that reads .env from the current working directory and extracts values label...

espectre snapshot-dev

🛜 ESPectre 👻 Motion detection system based on Wi-Fi spectre analysis CSI, with native Home Assistant integration via ESPHome. !TIP New ML Detector : Neural network-based motion detection. No calibration required, runs on-device. This is an experimental feature, and feedback is welcome in the...