CVE-2026-50411: Stack-based Buffer Overflow

Stack-based buffer overflow in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-50369: Use After Free

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...

CVE-2026-49164: Heap-based Buffer Overflow

Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

CVE-2026-50352: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

PT-2026-58127

Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Windows Schannel affected versions not specified Description A memory leak occurs in Windows Cryptographic Services when memory is not released after its effective lifetime. This...

CVE-2026-36035

Incorrect access control in the /api/License/deactivateOffline endpoint of CAXPerts UniversalPlantViewer WebServices Server v2.7.6 allows authenticated attackers with low-level privileges to cause a Denial of Service DoS via removing the license from the webserver...

PT-2026-58350

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an...

CVE-2026-49178: Heap-based Buffer Overflow

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network...

PT-2026-58908

Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, the Fluentd out http output plugin allows placeholders such as $tag in the endpoint configuration parameter, and if a placeholder value is derived from untruste...

CVE-2026-54983: Stack-based Buffer Overflow

Stack-based buffer overflow in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

PT-2026-58259

Name of the Vulnerable Software and Affected Versions Microsoft Active Directory Federation Services affected versions not specified Description An access control weakness exists in the service and admin surfaces of Microsoft Active Directory Federation Services AD FS due to insufficient...

Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally...

VulnCheck KEV: CVE-2026-56155

Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally...

CVE-2026-54121: Improper Authorization

Improper authorization in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges over a network...

PT-2026-58501

Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description An issue in Windows Cryptographic Services allows an authorized attacker to locally disclose sensitive information to an unauthorized actor. Recommendations At the...

CVE-2026-50681: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

CVE-2026-62240 CrewAI < 1.15.1 SSRF Filter Bypass via HTTP Redirect in Scrape Tools

CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validateurl function that performs one-shot DNS resolution and blocklist checks before returning the original URL unchanged. Attackers can bypass the security filter by supplying URLs that redirect to internal...

CVE-2026-62240 CrewAI < 1.15.1 SSRF Filter Bypass via HTTP Redirect in Scrape Tools

CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validateurl function that performs one-shot DNS resolution and blocklist checks before returning the original URL unchanged. Attackers can bypass the security filter by supplying URLs that redirect to internal...

CVE-2026-62240

CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validateurl function that performs one-shot DNS resolution and blocklist checks before returning the original URL unchanged. Attackers can bypass the security filter by supplying URLs that redirect to internal...

CVE-2026-49969

Laravel-Mediable before 7.0.0 contains a server-side request forgery vulnerability that allows remote attackers to issue arbitrary HTTP requests from the server by supplying unvalidated caller-controlled URLs to endpoints backed by MediaUploader::fromSource. Attackers can craft URLs targeting...