CVE-2026-96245: Out-of-bounds Read

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-96245: Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

PT-2026-112762

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description An out-of-bounds read exists in the Windows Routing and Remote Access Service RRAS, which allows an authorized attacker to disclose sensitive informatio...

Microsoft Windows: CVE-2026-85792: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

CVE-2026-85792: Use After Free

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

PT-2026-112760

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description Remote Code Execution in the Windows Routing and Remote Access Service RRAS allows remote attackers to execute arbitrary code, enabling unauthorized...

CVE-2026-85794: Out-of-bounds Read

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an authorized attacker to disclose information locally...

PT-2026-112715

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description An unauthorized attacker can disclose information over a network due to the use of an uninitialized resource within the Windows Routing and Remote Acces...

CVE-2026-89309: Missing Authentication for Critical Function

The authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases. First, it only requires an Authorization header for GET and HEAD requests; requests using any other HTTP method are processed without an authentication check. Second, for any HTTP method...

CVE-2026-84015: Heap-based Buffer Overflow

Heap-based buffer overflow in Remote Access Point-to-Point Protocol PPP EAP-TLS allows an unauthorized attacker to execute code over a network...

PT-2026-113055

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description An out-of-bounds read in the Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose sensitive information over a...

CVE-2026-109566

Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access through an AuthSeeder-created admin@laravel account with password admin. The account is seeded by the setup installer and silently re-create...

CVE-2026-109566 Rapyd Admin 9.0.0 before 9.20.0 Hard-Coded Super-Admin Credentials via AuthSeeder

Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access through an AuthSeeder-created admin@laravel account with password admin. The account is seeded by the setup installer and silently re-create...

CVE-2026-57118

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, AgentTeam.launch and the Agents alias register GET /path/list, POST /path, and POST /path/agentid' without access-control checks before listing agents or calling agent.chat. A remotely exposed server can therefore let...

EUVD-2026-97473

A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38ww on Android. The impacted element is the function syncInvoke of the component WebView JS Bridge. The manipulation leads to exposed dangerous routine. The attack is possible to be carried out remotely. The...

Remote Access Management Privilege Escalation

The vulnerability of the Remote Access Management service in Windows operating systems is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow attackers to increase their privileges...

PT-2026-110488

Name of the Vulnerable Software and Affected Versions OTRS versions 8.0.X OTRS versions 2023.X OTRS versions 2024.X OTRS versions 2025.X OTRS versions prior to 2026.7.X Description The Agent Frontend configuration endpoint can be accessed without authentication, allowing remote users to retrieve...

Dell System Update < 2.3.0.0 Multiple Vulnerabilities (DSA-2026-324)

According to its self-reported version, the Dell System Update DSU installation on the remote host is prior to 2.3.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the DSA-2026-324 advisory. - Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitati...

weevely3

Weevely - Shell web armamentizado Descripción Weevely es un shell web diseñado para fines de post-explotación que puede extenderse a través de la red en tiempo de ejecución. Suba el agente PHP de weevely a un servidor web objetivo para obtener acceso remoto a un shell en él. Tiene más de 30 módul...

CVE-2026-78341

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Unauthorized access...