PT-2026-96699

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.5.0p14 Description Improper neutralization of newlines in filter values within the monitoring host and service list APIs allows an authenticated user to inject additional Livestatus query headers. This can lead to t...

CVE-2026-47193

OpenProject (open-source web-based project management) contains a vulnerability in the journal diff endpoint that discloses hidden historical field values due to lack of object/field visibility enforcement. The issue is fixed in versions 17.3.3 and 17.4.1. Affected component: journal diff endpoin...