PT-2026-84140

A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the file /CGI?RestApi=SetHostname. Executing a manipulation of the argument ParameterArray can lead to command injection. The attack can be executed remotely. The...

CVE-2026-51762

CVE-2026-51762 is an incorrect access control vulnerability in the meshInfoKick function of TOTOLINK T6 firmware version 4.1.5cu.748_B20211015 . An unauthenticated attacker can send a crafted MQTT message to the cs_broker component to kick or clean stale mesh information/state and trigger regener...

CVE-2026-51765

Incorrect access control in the recvIndirectMeshInfo function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to insert or replace mesh neighbor records via sending a crafted MQTT message to the csbroker component...

CVE-2026-51757

Incorrect access control in the meshSlaveUpdate function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to start a firmware download or flash workflow on the slave device via sending a crafted MQTT message to the csbroker component...

CVE-2026-51974

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

CVE-2026-51741

An incorrect access control vulnerability in the clearDiagnosisLog function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ) allows unauthenticated attackers to erase diagnosis logs by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The missing authorization check on this endpo...

PT-2026-84202

Incorrect access control in the clearDiagnosisLog function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to erase diagnosis logs via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-84239

Incorrect access control in the meshSlaveUpdate function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to start a firmware download or flash workflow on the slave device via sending a crafted MQTT message to the cs broker component...

PT-2026-84314

Incorrect access control in the sendToMasterQosConfig function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to forward attacker-controlled QoS settings to the master via sending a crafted MQTT message to the cs broker component...

PT-2026-84063

A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the poptConfigFileToString function reallocates memory for buffers...

PT-2026-84109

The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.9 via the upload template kit function. This is due to incorrect...

PT-2026-84313

Incorrect access control in the remoteCloudUpdateCheck function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to restart the cloud update check workflow via sending a crafted MQTT message to the cs broker component...

PT-2026-84461

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.16.0 Description An attacker can craft a PDF with a cyclic tree structure that triggers an infinite loop. This occurs when a writing code path utilizes the TreeObject.insert child function in pypdf/generic/ data...

PT-2026-84361

An eval injection vulnerability in the get list function in modules/meta parser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

PT-2026-84307

A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause read string to allocate a buffer with a certain length but the function does not verify that the buffer is completely filled, leaving the remainder of the buffer containing uninitialized heap...

PT-2026-84308

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause read reply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causin...

PT-2026-84309

A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the pre-sized reply buffer, causing the operati...

Alibaba Cloud Linux 3 : 0263: python-idna (ALINUX3-SA-2026:0263)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by a vulnerability as referenced in the ALINUX3-SA-2026:0263 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-45409: Internationalized Domain Names in...

CVE-2026-51744

CVE-2026-51744 is an incorrect access control flaw in the recv_mesh_info_sync function of TOTOLINK T6 (firmware 4.1.5cu.748_B20211015). An unauthenticated remote attacker can send a crafted MQTT message to the cs_broker component to force mesh configuration synchronization from an attacker-contro...

CVE-2026-51763

An incorrect access control flaw in the freeStaClient function of TOTOLINK T6 (firmware 4.1.5cu.748_B20211015) allows unauthenticated network attackers to forcibly disconnect wireless clients by sending a crafted MQTT message to the cs_broker component. The CVSS v3.1 score is 9.8 (Critical) with ...