CVE-2026-81375 Confused Deputy in Application Integration allows Internal File Read

A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to 2026-06-30 on Google Cloud Platform allows an authenticated attacker to read and exfiltrate arbitrary Google-internal files via a crafted attachment file path. This vulnerability w...

EUVD-2026-88214

A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to 2026-06-30 on Google Cloud Platform allows an authenticated attacker to read and exfiltrate arbitrary Google-internal files via a crafted attachment file path. This vulnerability w...

CVE-2026-81867 Deserialization of Untrusted Data in Application Integration allows Remote Code Execution

A Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration versions prior to 2026-06-28 on Google Cloud Platform allows an authenticated user with standard permissions to run arbitrary code on the shared production servers using a specially...

EUVD-2026-88212

A Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration versions prior to 2026-06-28 on Google Cloud Platform allows an authenticated user with standard permissions to run arbitrary code on the shared production servers using a specially...

CVE-2026-81867 Deserialization of Untrusted Data in Application Integration allows Remote Code Execution

A Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration versions prior to 2026-06-28 on Google Cloud Platform allows an authenticated user with standard permissions to run arbitrary code on the shared production servers using a specially...

CVE-2026-81867

A Deserialization of Untrusted Data vulnerability exists in the JavaScript Task of Google Cloud Application Integration (versions prior to 2026-06-28). An authenticated user with standard permissions can execute arbitrary code on shared production servers by using a specially crafted script that ...

EUVD-2026-88208

An Incorrect Authorization vulnerability in the task configuration in Google Cloud Application Integration versions prior to 2026-06-17 on Google Cloud Platform allows an authenticated Google Cloud user to execute arbitrary internal RPCs from inside Google's production network under a privileged...

CVE-2026-19759 Incorrect Authorization in Application Integration allows Internal Stubby RPC Execution

An Incorrect Authorization vulnerability in the task configuration in Google Cloud Application Integration versions prior to 2026-06-17 on Google Cloud Platform allows an authenticated Google Cloud user to execute arbitrary internal RPCs from inside Google's production network under a privileged...

CVE-2026-19759

Google Cloud Application Integration versions prior to 2026-06-17 are affected by an Incorrect Authorization vulnerability in the task configuration. This flaw allows an authenticated Google Cloud user to execute arbitrary internal RPCs from within Google's production network under a privileged i...

CVE-2026-19759 Incorrect Authorization in Application Integration allows Internal Stubby RPC Execution

An Incorrect Authorization vulnerability in the task configuration in Google Cloud Application Integration versions prior to 2026-06-17 on Google Cloud Platform allows an authenticated Google Cloud user to execute arbitrary internal RPCs from inside Google's production network under a privileged...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.69 bug fix and security update

Red Hat OpenShift Container Platform release 4.15.69 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

PT-2026-99875

Name of the Vulnerable Software and Affected Versions Enocta Platform versions prior to 2026-09-28 Description An authorization bypass exists due to the use of user-controlled keys, which allows for the exploitation of trusted identifiers. Recommendations Update Enocta Platform to a version...

CVE-2026-19759: Incorrect Authorization

An Incorrect Authorization vulnerability in the task configuration in Google Cloud Application Integration versions prior to 2026-06-17 on Google Cloud Platform allows an authenticated Google Cloud user to execute arbitrary internal RPCs from inside Google's production network under a privileged...

WordPress Automation Web Platform 4.8.6 Vulnerability Checker

WordPress Automation Web Platform plugin versions through version 4.8.6 contain an unauthenticated privilege escalation vulnerability. This tool passively detects the plugin, identifies publicly exposed versions, and flags versions in the affected range...

CVE-2026-82326: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows XSS Targeting HTML Attributes. This issue affects Enocta Platform: through 2026-09-28...

CVE-2026-82323: Authorization Bypass Through User-Controlled Key

Authorization bypass through User-Controlled key vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows Exploitation of Trusted Identifiers. This issue affects Enocta Platform: through 2026-09-28...

PT-2026-99850

Name of the Vulnerable Software and Affected Versions Google Cloud Application Integration versions prior to 2026-06-30 Description A Confused Deputy issue in the EmailTask component on Google Cloud Platform allows an authenticated attacker to read and exfiltrate arbitrary Google-internal files...

PT-2026-102429

Name of the Vulnerable Software and Affected Versions @angular/platform-server affected versions not specified Description A Denial of Service DoS issue exists in the DOM emulation parser domino used by @angular/platform-server for Server-Side Rendering SSR. When the parser processes untrusted HT...

PT-2026-99876

Name of the Vulnerable Software and Affected Versions Enocta Platform versions prior to 2026-09-28 Description Improper neutralization of input during web page generation leads to a cross-site scripting XSS issue in the Enocta Platform. This flaw allows for XSS targeting HTML attributes, which...

DecoyTrace: Toxic Decoys for Active Defense in Decentralized Federated Learning

Decentralized Federated Learning DFL eliminates the central aggregation server, reducing the single point of observation that traditional defenses against attacks rely on. As a result, peer-to-peer networks become exposed to malicious updates containing backdoors or semantic poisoning, since such...