PT-2026-70901

Snipe-IT before 8.6.0 contains an authorization bypass insecure direct object reference in the asset checkout-request cancellation endpoint. The cancel by admin and requestingUser values are read from user-controlled URL path segments and used without a server-side authorization check, so any...

VRT0011, Intel® Chipset Firmware Advisory

Summary: A potential security vulnerability for some Intel® Converged Security and Management Engine Intel® CSME and Intel® Server Platform Services Intel® SPS may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details:...

VRT0010, Intel® Chipset Firmware Advisory

Summary: A potential security vulnerability for some Intel® Converged Security and Management Engine Intel® CSME and Intel® Server Platform Services Intel® SPS may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details:...

Intel® AI Containers Software Advisory

Summary: A potential security vulnerability for some Intel® AI Containers software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel® AI Containers software. Vulnerability Details:...

Intel® Neural Compressor software advisory

Summary: Potential security vulnerabilities for some Intel® Neural Compressor software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-20906 Description: Protection mechanism failure for some...

ntel® Transfer Learning Tool Software Advisory

Summary: A potential security vulnerability for some Intel® Transfer Learning Tool software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for the Intel® Transfer Learning Tool software...

Intel® Workload Services Framework Software Advisory

Summary: A potential security vulnerability for some Intel® Workload Services Framework software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-28757 Description: Protection mechanism failure...

EquiTriton Software Advisory

Summary: A potential security vulnerability for some EquiTriton Software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-28700 Description: Uncontrolled search path for some EquiTriton before...

LLM Scaler Software Advisory

Summary: A potential security vulnerability for some LLM Scaler software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20755 Description: Protection mechanism failure for some LLM Scaler...

Intel® Extension for PyTorch Software Advisory

Summary: A potential security vulnerability for some Intel® Extension for PyTorch software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for the Intel® Extension for PyTorch software...

Intel® PROSet/Wireless WiFi Software Advisory-01422

Summary: Potential security vulnerabilities for some Intel® PROSet/Wireless WiFi Software may allow escalation of privileges or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-20789 Description: Improper...

PT-2026-70761

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Server-side request forgery SSRF allows an authorized attacker to elevate privileges over a network. SSRF is a flaw where an attacker can induce the server-side applicatio...

PT-2026-70531

Name of the Vulnerable Software and Affected Versions Windows Schannel affected versions not specified Description A use-after-free condition in Windows Schannel allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an applicatio...

PT-2026-70847

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper...

PT-2026-70451

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description An out-of-bounds read in the Windows DWM Core Library allows an authorized attacker to disclose sensitive information locally, which may affect the system. Recommendations At...

PT-2026-70854

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more specific privileges. This could result in exposure of collection metadata and, on certain deployment configurations,...

PT-2026-70671

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A use-after-free condition in the Windows Win32K component allows an authorized attacker to elevate privileges locally. This issue can also lead to information disclosure within the...

PT-2026-70072

Name of the Vulnerable Software and Affected Versions Axis ACAP framework affected versions not specified Description The ACAP framework contains a Time-of-Check to Time-of-Use TOCTOU race condition, which is a software bug where a system checks the state of a resource before using it, but the...

PT-2026-70331

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An Incorrect Authorization issue allows a low-privileged attacker to achieve privilege escalation. This flaw enables unauthorized read and write access and can ...

PT-2026-70507

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Device Association Service. This issue allows an authorized attacker to elevate privileges locally on the system....