PT-2026-111575

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.5 and 9.0 Description A flaw in the CSIv2 inbound propagation handler allows a remote attacker to bypass authentication. Recommendations At the moment, there is no information about a newer version...

PT-2026-113264

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

PT-2026-113391

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods...

PT-2026-111722

ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/id endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles. Attackers can request sequential article ids or supply isDraft=true or...

CVE-2026-110131: Missing Authorization

ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/id endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles. Attackers can request sequential article ids or supply isDraft=true or...

PT-2026-112877

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

PT-2026-113024

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow in the DNS Server allows an unauthorized remote attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer...

PT-2026-112389

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2016 CU23 Microsoft Exchange Server 2019 CU14 Microsoft Exchange Server 2019 CU15 Microsoft Exchange Server Subscription Edition RTM Description A stack-based buffer overflow exists in the internal content-conversion...

Microsoft Windows: CVE-2026-83722: Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Use after free in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-97838: Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

PT-2026-113269

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

PT-2026-113246

Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network...

PT-2026-113132

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

PT-2026-113259

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

PT-2026-111844

Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server,...

PT-2026-111389

Name of the Vulnerable Software and Affected Versions Industrial Edge App Publisher versions prior to V1.27.9 Description The software fails to properly validate the server certificate during the initiation of a TLS connection. This flaw enables a Man-in-the-Middle attack, where an attacker can...

PT-2026-113444

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

KB5126835: Windows Server 2012 Security Update (October 2026)

The remote Windows host is missing security update 5126835. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

KB5126836: Windows Server 2012 R2 Security Update (October 2026)

The remote Windows host is missing security update 5126836. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

KB5126653: Windows 11 version 23H2 Security Update (October 2026)

The remote Windows host is missing security update 5126653. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...