PT-2026-60775

Name of the Vulnerable Software and Affected Versions Cursor for Windows version 3.2.16 Description A binary planting issue allows remote attackers to achieve arbitrary code execution. This occurs when a developer clones and opens a crafted repository containing a malicious git.exe file in the ro...

PT-2026-60810

Name of the Vulnerable Software and Affected Versions Sangoma Switchvox SMB Edition version 8.3 104997 Description An unauthenticated SQL injection exists where the '/pa' endpoint processes XML content starting with . The system directly concatenates the user-controlled PhoneIP value into...

The vulnerability of the console-based graphic editor ImageMagick arises from a lack of mechanisms for encoding or shielding output data, allowing attackers to execute arbitrary code.

The vulnerability of the console-based graphic editor ImageMagick is related to the lack of mechanisms for encoding or shielding the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerability of the Audio/Video component: Web codecs in Mozilla Firefox, Firefox ESR, and the email client Thunderbird, allowing attackers to execute arbitrary code.

The vulnerability of the Audio/Video component: Mozilla Firefox, Firefox ESR, and the email client Thunderbird’s web codecs are vulnerable due to initialization errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the urb_write_completion() function in the RDP client FreeRDP allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the urbwritecompletion function in the RDP client FreeRDP relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code...

The vulnerability of the audio_format_compatible() function in the RDP client FreeRDP allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the audioformatcompatible function in the RDP client FreeRDP relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure or execute arbitrary code...

Vulnerability of the libusb_udev_select_interface() function in the RDP client FreeRDP, allowing a hacker to cause a service failure or execute arbitrary code

The vulnerability of the libusbudevselectinterface function in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code...

Security Updates for Microsoft OneNote Products C2R (July 2026)

The Microsoft OneNote Products are missing security updates. It is, therefore, affected by a remote code execution vulnerability: - Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally. CVE-2026-55133 Note that Nessus has not tested for th...

PT-2026-60864

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.0 Description A remote code execution issue exists in the disk-based caching mechanism. The AsyncDiskCache class uses the unsafe pickle.loads function to deserialize cached objects from disk without...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in their deserialization mechanism flaws, which allows attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

PT-2026-60871

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.1 Description An unauthenticated remote code execution issue exists in the public flow build endpoint '/api/v1/build public tmp/flow id/flow'. The flaw is caused by an incomplete denylist within the...

CVE-2026-52199

CVE-2026-52199 affects Generic OEM UZ801_v2.1 4G LTE Router V3.4.3, where the sbin/adbd component is vulnerable to remote arbitrary-code execution. The CVSSv3.1 base score is 9.1 (CRITICAL) with network access, low attack complexity, no privileges, and no user interaction required. Connected sour...

PT-2026-60854

Name of the Vulnerable Software and Affected Versions Generic OEM UZ801 v2.1 4G LTE Router version 3.4.3 Description A remote attacker can execute arbitrary code through the sbin/adbd component. Recommendations At the moment, there is no information about a newer version that contains a fix for...

CVE-2026-52199

An issue in Generic OEM UZ801v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the sbin/adbd component...

PT-2026-60835

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control...

PT-2026-60842

Name of the Vulnerable Software and Affected Versions IBM Engineering AI Hub versions 1.0.0 through 1.2.0 Description Improper neutralization of input during web page generation allows a remote attacker to execute arbitrary script code. This issue is a Cross-Site Scripting XSS flaw, where an...

PT-2026-60856

Name of the Vulnerable Software and Affected Versions WordPress versions 6.9.0 through 6.9.4 WordPress versions 7.0.0 through 7.0.1 Description A route confusion issue in the REST API batch endpoint, combined with a SQL injection flaw in the WP Query class, allows a remote attacker to perform SQL...

PT-2026-60860

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.0 Description Remote code execution is possible due to incomplete validation enforcement on MCP server configuration files. Recommendations Update IBM Langflow OSS to a version later than 1.10.0...

Security Updates for Microsoft SharePoint Server 2019 (July 2026)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. CVE-2026-505...

Rockwell Studio 5000 Logix Designer Incorrect Authorization RCE (SD1783)

The version of Rockwell Studio 5000 Logix Designer installed on the remote Windows host is affected by a remote code execution vulnerability. Due to incorrect authorization on a configuration file, any authenticated user can modify the paths of external tools configured within the application. An...