PT-2026-70913

Name of the Vulnerable Software and Affected Versions FileRun versions prior to 2026.2.1 Description Authenticated attackers can achieve remote code execution through an OS command injection. The issue occurs when the thumbnail generation system passes filenames wrapped in shell double-quotes...

PT-2026-70930

Name of the Vulnerable Software and Affected Versions libgit2 versions 0.27.0 through 1.9.0 Description Remote attackers can execute arbitrary commands on an SSH server when the software is built with the libssh2 SSH backend USE SSH=libssh2. The issue occurs because the gen proto function in ssh...

PT-2026-70631

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An integer overflow or wraparound occurs in Microsoft Office, which could allow an unauthorized attacker to execute arbitrary code locally or remotely, potentially affecting the enti...

PT-2026-70091

Name of the Vulnerable Software and Affected Versions JBoss Enterprise Application Platform affected versions not specified Description When the software runs with the -secmgr flag, the JDKBridge component of openjdk-orb processes attacker-supplied CDR Common Data Representation codebase URLs...

PT-2026-70161

AVideo contains an unauthenticated arbitrary file write vulnerability in the aVideoEncoderChunk.json.php endpoint that allows remote attackers to write up to 4 GB of arbitrary content to the server filesystem via HTTP PUT requests without authentication. Attackers can exhaust disk space causing...

PT-2026-70559

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description A flaw in the Windows Routing and Remote Access Service RRAS allows remote attackers to execute arbitrary code, potentially granting unauthorized access...

PT-2026-70584

Name of the Vulnerable Software and Affected Versions Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description A double free issue in the Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized remote attacker to execute arbitrary code over a network...

PT-2026-70686

Name of the Vulnerable Software and Affected Versions Windows iSCSI Target Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows iSCSI Target Service. This issue allows an unauthorized remote attacker to execute arbitrary code over a network,...

PT-2026-70890

DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary files to any location on the server by injecting directory traversal sequences into the user id HTTP header of the Python file-upload endpoint. Attackers can send a crafted...

PT-2026-70199

Craft CMS versions = 5.0.0-RC1 before 5.10.7 and = 4.0.0-RC1 before 4.18.3 contain a remote code execution vulnerability in the Twig sandbox mechanism. Because Craft marks the ElementInterface as safe via the AllowedInSandbox attribute and the sandbox allowlisting extends to the entire class...

Zoom Workplace < 7.1.5 Vulnerability (ZSB-26017)

The version of Zoom Workplace installed on the remote host is prior to 7.1.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-26017 advisory. - Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of anoth...

PT-2026-70240

Fooocus is an image generating software. In versions 2.5.5 and prior, the Fooocus web UI is vulnerable to remote code execution due to the unsafe use of eval when processing metadata JSON. An attacker with access to the Fooocus web UI may be able to execute arbitrary code on the instance. As of...

PT-2026-70770

Name of the Vulnerable Software and Affected Versions Microsoft PowerShell Core affected versions not specified Description A relative path traversal issue exists that allows an unauthorized attacker to execute code over a network. Path traversal is a flaw that allows an attacker to access files ...

PT-2026-70989

OriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro . User interaction is required to exploit this vulnerability in that the target must...

PT-2026-70178

Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in the control panel element-search condition handling. Craft cleanses the outer request-controlled condition array via Component::cleanseConfig, but...

KLA91214 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, read local files, spoof user interface. Below is a complete...

KLA91204 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in WebGL can be...

Security Update for Microsoft .NET Core (August 2026)

The Microsoft .NET Core installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - .NET Elevation of Privilege Vulnerability CVE-2026-58641, CVE-2026-62871, CVE-2026-62886, CVE-2026-62909 - .NET...

PT-2026-70261

Name of the Vulnerable Software and Affected Versions Zoom Clients affected versions not specified Description A Use after Free issue exists in the annotator function. This flaw allows a meeting participant to achieve remote code execution on another participant's system via network access. Use...

PT-2026-70612

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper input validation allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Recommendations At the moment, there is no...