CVE-2026-16488

A vulnerability was determined in QUSETIONS MiniCode-Python 0.1.0. This vulnerability affects the function subprocess.Popen of the file minicode/config.py of the component Project File Handler. Executing a manipulation can lead to os command injection. The attack may be launched remotely. A high...

PT-2026-63533

Name of the Vulnerable Software and Affected Versions Drupal Development Environment versions . Description A security issue exists within the Drupal Development Environment. The project is currently marked as unsupported, and the maintainer has not provided a fix for this issue. Recommendations ...

PT-2026-63337

A flaw was found in AWX. The websocket event consumer performs RBAC authorization checks only for event groups that are mapped in the consumer access function job events, workflow events, ad hoc command events. Three event groups - inventory update events, project update events, and system job...

PT-2026-63538

Name of the Vulnerable Software and Affected Versions Drupal Email Login OTP versions . Description A security issue exists in the Drupal Email Login OTP project. The project is currently marked as unsupported, and the maintainer has not provided a fix for this issue. Recommendations At the momen...

PT-2026-63537

Name of the Vulnerable Software and Affected Versions Drupal Commerce Elavon affected versions not specified Description A security issue exists in the Drupal Commerce Elavon project. The project has been marked as unsupported, and the security flaw remains unaddressed by the maintainer...

Development Environment - Critical - Unsupported - SA-CONTRIB-2026-089

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

Email Login OTP - Critical - Unsupported - SA-CONTRIB-2026-085

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

Lunr exposed filters - Critical - Unsupported - SA-CONTRIB-2026-086

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

Commerce Elavon - Critical - Unsupported - SA-CONTRIB-2026-084

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

PT-2026-63539

Name of the Vulnerable Software and Affected Versions Drupal Lunr exposed filters versions . Description An issue exists within the exposed filters of Drupal Lunr. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2026-63345

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.30.1 Description A privilege escalation issue exists in the AI Agents feature where the node-execution tool lacks proper authorization checks. A user with the Project Viewer role can escalate privileges by interacting...

CVE-2026-16488

The CVE covers QUSETIONS MiniCode-Python 0.1.0 where the subprocess.Popen call in minicode/config.py of the Project File Handler is vulnerable to OS command injection. The issue can be exploited remotely with high attack complexity and no privileges required, though user interaction is indicated ...

CVE-2026-62483

Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project...

CVE-2026-61209

Vulnerability in the PeopleSoft In-Memory Project Discovery product of Oracle PeopleSoft component: Project Discovery. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft In-Memory...

CVE-2026-61090

Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite component: Miscellaneous. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Project Foundation...

CVE-2026-60985

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-60986

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-60984

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-60988

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-60987

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...