CVE-2026-57705

creationtimestamp| type| source ---|---|--- 2026-07-14 01:45:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql3ivgsst2a 2026-07-16 08:16:47+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsbulbeg2b...

CVE-2026-44768

creationtimestamp| type| source ---|---|--- 2026-07-14 01:40:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql37ztbex2l...

CVE-2026-44768 Security misconfiguration in SAP CRM (WebClient UI)

SAP CRM WebClient UI allows an attacker to inject and execute malicious scripts in the context of the application due to the absence of a Content Security Policy CSP configuration for certain restrictive directives. This vulnerability has a low impact on the integrity of the application...

PT-2026-58117

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description A protection mechanism failure in the Windows Event Logging Service allows an authorized attacker to disclose sensitive information over a network. Specifically, the system recorded the fu...

The vulnerability of the Undertow web server, related to unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the Undertow web server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

PT-2026-58262

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description Resource allocation without limits or throttling allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the moment, there is no information about...

PT-2026-58002

Milestone has released a new version of XProtect® and several cumulative patch updates which fix security vulnerability in Management Server API. The vulnerability causes users with edit permissions to the Management Server to be able to execute arbitrary code in context of the Management Server...

RockyLinux 10 : plexus-utils (RLSA-2026:38514)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:38514 advisory. org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method CVE-2025-67030 Tenable has extracted the preceding description block...

PT-2026-58759

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server for Linux affected versions not specified Description A stack-based buffer overflow exists in the software, which occurs when a program writes more data to a buffer located on the stack than the buffer is allocat...

PT-2026-58717

Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description An issue exists where resources are allocated without limits or throttling, allowing an unauthorized attacker to cause a denial of service over a network. Recommendations At the moment...

PT-2026-58675

Name of the Vulnerable Software and Affected Versions Devolutions Server version 2026.2.11 Devolutions Server version 2026.1.22 Description Improper authorization in the PAM SSH key and certificate retrieval endpoints allows an authenticated low-privileged user to disclose the private key of an S...

PT-2026-58668

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A use-after-free and double-free condition exists in the DirectX Graphics Kernel dxgkrnl. The issue occurs during the rollback process of a failed D3DKMTCreateAllocation function call...

PT-2026-58575

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A double free issue exists in Microsoft Office Word, which allows an unauthorized attacker to execute code locally. This occurs when a victim opens a specially crafted file,...

PT-2026-58844

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An integer overflow or wraparound occurs, which can be exploited by an attacker to crash the application. This leads to a denial-of-service condition and does not require user...

KLA91144 Multiple vulnerability in Microsoft Device

Multiple vulnerability was found in Microsoft Device. Malicious users can exploit this vulnerability to bypass security restrictions, gain privileges. Original advisories CVE-2026-48581 Exploitation CVE list CVE-2026-48581 critical KB list Solution Install necessary updates from the KB section,...

PT-2026-58808

Name of the Vulnerable Software and Affected Versions jackson-databind versions 2.18.0 through 2.18.8 jackson-databind versions 2.21.0 through 2.21.4 jackson-databind versions 2.22.0 through 2.22.0 jackson-databind versions 3.1.0 through 3.1.4 jackson-databind versions 3.2.0 through 3.2.0...

PT-2026-58146

Name of the Vulnerable Software and Affected Versions Microsoft Windows Speech affected versions not specified Description A use-after-free condition in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs wh...

PT-2026-58914

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

PT-2026-58201

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use after free issue in the Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application...

PT-2026-58899

Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a Composer package bin entry containing .. path segments can resolve outside the package install directory and cause Composer's binary installation flow to chmod an existing host file to a world-readable and...