PT-2026-77212

Name of the Vulnerable Software and Affected Versions Dell PowerStore SDNAS affected versions not specified Description An Out-of-bounds Write issue exists in the SMB/CIFS component. An unauthenticated remote attacker can send a specially crafted SMB packet to trigger a crash, resulting in a Deni...

PT-2026-77619

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 25.12 through 26.6 Description An issue exists in the Open Integration component of the Siebel CRM Integration product. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the...

CVE-2026-67920

Halo 2.25.4's MigrationServiceImpl.restoreWorkdir() fetches an arbitrary URL, extracts the zip's workdir/ into the Halo work dir unsanitized via FileSystemUtils.copyRecursively(), replacing the entire extension store and enabling RCE. A working exploit (exploit/migration_restore.py) is verified a...

Microsoft Edge (Chromium) < 151.0.4129.86 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 151.0.4129.86. It is, therefore, affected by multiple vulnerabilities as referenced in the August 14, 2026 advisory. - Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execu...

Linux Distros Unpatched Vulnerability : CVE-2026-74997

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmdlearn driver of the markasjunk plugin is subject to remote code execution via crafted...

PT-2026-77944

Name of the Vulnerable Software and Affected Versions Oracle Commerce Platform version 11.4.0 Description A flaw in the Dynamo Application Framework component allows an unauthenticated attacker with network access via TCP to compromise the system. Successful exploitation can lead to a complete...

Amazon Corretto Java 8.x < 8.504.01.1 Multiple Vulnerabilities

The version of Amazon Corretto installed on the remote host is 8 prior to 8.504.01.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-8-2026-Aug-18 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ...

Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

Microsoft Internet Key Exchange IKE Service Extensions contains a double free vulnerability that could enable remote code execution...

PT-2026-77349

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 Description An issue in the Core component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via T3 and IIOP protocols to...

CVE-2026-52607

A directory traversal vulnerability in reportico-web = 8.1.0 allows remote attackers to expose or execute arbitrary php files on the web server by specifying the filename in the targetformat parameter in conjunction with the executemode=EXECUTE parameter of the run.php endpoint...

PT-2026-77424

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Enterprise Capture version 12.2.1.4.0 Oracle WebCenter Enterprise Capture version 14.1.2.0.0 Description An issue exists in the Client Bundle component of Oracle WebCenter Enterprise Capture. An unauthenticated attacker with...

PT-2026-77917

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Workflow versions 12.2.3 through 12.2.15 Description A flaw in the Workflow Notification Mailer component allows an unauthenticated attacker with network access via SMTP to compromise the system. Successful...

PT-2026-77913

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Enterprise Case Management version 8.0.8.2 Oracle Financial Services Enterprise Case Management version 8.1.2.11 Description A flaw in the Web UI component allows a low privileged attacker with network access via HTTP...

KLA91231 Multiple vulnerabilities in Mozilla Thunderbird ESR

Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability...

KLA91228 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability can ...

PT-2026-77440

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Enterprise Capture version 12.2.1.4.0 Oracle WebCenter Enterprise Capture version 14.1.2.0.0 Description An issue exists in the Client Bundle component of Oracle WebCenter Enterprise Capture. An unauthenticated attacker with...

PT-2026-77331

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.169 Description A race condition in the USB component allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code outside the sandbox. This is...

PT-2026-77159

CodeWhale packages codewhale / codewhale-tui versions = 0.8.41 and 0.8.64 contain a remote code execution vulnerability in the rlm eval tool. The tool's approval requirement returns ApprovalRequirement::Auto, which the engine treats as 'never prompt,' causing arbitrary model-supplied Python code ...

PT-2026-77171

MyBB is free and open source forum software. From 1.8.13 until 1.8.40, the installer module does not properly escape user-supplied database configuration values written to the configuration file, resulting in PHP code injection and remote code execution when the installer is available...

CVE-2026-67920

An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.halo.app.migration.impl.MigrationServiceImpl.restoreWorkdir, and org.springframework.util.FileSystemUtils.copyRecursively components...