The vulnerability of the MinIO object storage server, related to the unlimited distribution of resources, allows a attacker to cause a service failure.

The vulnerability of the MinIO object storage server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the DnsResolveContext component in the framework for developing network applications, servers, and clients using the Netty protocol allows a hacker to bypass security restrictions.

The vulnerability of the DnsResolveContext component in the framework for developing network applications, servers, and Netty protocol clients is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker to bypass security restrictions remotely...

The vulnerability of services for the NFS ONCRPC XDR operating system allows a hacker to trigger a service failure.

The vulnerability of services for the NFS ONCRPC XDR operating system lies in reading data beyond the allowed range of memory. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the container management system and the virtual machine manager Incus, related to improper external control of file names or file paths, allows attackers to execute arbitrary commands.

The vulnerability of the container management system and the virtual machine manager Incus is related to improper external control of the file name or path. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the sub_410188() function in TOTOLINK A3002MU router microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the sub410188 function in TOTOLINK A3002MU router microprogramming systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of Windows operating systems’ message queues allows a perpetrator to execute arbitrary code.

The vulnerability of Message Queuing in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the validation mechanism for the compression algorithm of the container management system and the Incus virtual machine manager allows a perpetrator to execute arbitrary commands.

The vulnerability of the validation mechanism for the compression algorithm of the container management system and the Incus virtual machine manager relates to insufficient checking of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

The vulnerability of OpenBao’s secret and encryption management system, related to inadequate access control, allows attackers to enhance their privileges.

The vulnerability of the OpenBao encryption and secret management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the PHP interpreter, related to the assignment of the null pointer, allows attackers to trigger a service failure.

The vulnerability of the PHP interpreter is related to pointer operations. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the strcpy() function in the /goform/setSysAdm function of the UTT 1250GW networking device’s microprogramming system allows a hacker to cause a service failure.

The vulnerability of the strcpy function in the /goform/setSysAdm function of the UTT 1250GW networking device’s microprogramming system is related to the copying of buffers without checking the size of the input data when processing the GroupName parameter. Exploiting this vulnerability could...

The vulnerability of TP-Link Archer VX1800v V1’s microprogramming software lies in the failure to implement measures to eliminate CRLF sequences. This allows attackers to alter user account roles and gain administrator privileges.

The vulnerability of TP-Link Archer VX1800v V1 microprogramming software is related to the lack of measures taken to eliminate CRLF sequences. Exploiting this vulnerability allows a remote attacker to alter account roles and gain administrator privileges...

The vulnerability of the setWiFiBasicCfg() function in Totolink A8000RU router software allows a hacker to execute arbitrary commands.

The vulnerability of the setWiFiBasicCfg function in Totolink A8000RU router microprogramming software is related to the lack of measures taken for data cleaning at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary operating system commands using a...

PT-2026-99881

A security vulnerability has been detected in dbgate up to 7.3.1. Affected by this vulnerability is the function files of the file packages/api/src/controllers/runners.js of the component Files Endpoint. The manipulation of the argument runid leads to path traversal. The attack is possible to be...

PT-2026-102402

Name of the Vulnerable Software and Affected Versions Intelbras TIP 125i versions 4.3.35 through 4.3.41 Description A remote attack targeting an unknown function within the Básico Page component can lead to the inclusion of sensitive information in the source code. This issue is characterized by...

PT-2026-99847

Name of the Vulnerable Software and Affected Versions refly-ai refly versions prior to 1.1.1 Description An issue exists in the JWT Token Handler component within the file apps/api/src/modules/config/app.config.ts. Manipulation of the test input can lead to the exposure of hard-coded credentials,...

PT-2026-99882

A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /exchange/attachment/upload of the component Upload Endpoint. This manipulation of the argument File causes unrestricted upload. The attack can be initiated...

CVE-2026-100903: Missing Authentication for Critical Function

A vulnerability was identified in ООО НПО Ритм GEOritm up to 2.45.1. This affects an unknown part of the file /restapi/objects/obj-groups of the component REST API. Such manipulation of the argument objectId leads to missing authentication. The attack can be launched remotely. The exploit is...

PT-2026-99925

Name of the Vulnerable Software and Affected Versions SUSE Rancher versions prior to 2.15.2 Description Incorrect credential cleaning during the logout process allows remote attackers to retain access credentials after an account has been logged out. Recommendations Update to version 2.15.2...

The vulnerability of the IpSubnetFilterRule.compareTo() function in the framework for developing network applications, servers, and clients using the Netty protocol allows a hacker to bypass security restrictions.

The vulnerability of the IpSubnetFilterRule.compareTo function in the framework for developing network applications, servers, and Netty protocol clients is related to improper checking of the specified data type for input data. Exploiting this vulnerability can allow an attacker to bypass securit...

CVE-2026-101100: Incomplete Cleanup

A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsMiddleware of the file sdks/typescript/packages/client/src/middleware/filter-tool-calls.ts of the component Middleware. Executing a manipulation can lead to incomplete cleanup. T...