PT-2026-55130

Summary dist/clients/core/params.ts in @hey-api/openapi-ts ships a runtime template that is copied verbatim into every generated SDK as params.gen.ts. When a caller passes an object argument containing an unknown key starting with a slot prefix $body , $headers , $path , $query , the function...

Cisco Webex App URL Redirection

The vulnerability of the Cisco Webex App for collaborative work relates to the redirection of the URL to an unreliable website as a result of incorrect processing of HTTP request parameters. Exploiting this vulnerability allows a malicious actor to redirect users to any desired URL address...

CVE-2026-40038

Pachno 1.0.6 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious payloads into POST parameters. Attackers can inject scripts through the value, commentbody, articlecontent, description, and message parameters...

Apex One Authentication Bypass

The vulnerability of the Apex One antivirus software is related to deficiencies in the authentication process when processing request parameters. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and circumvent security...