PT-2026-113226

Name of the Vulnerable Software and Affected Versions Windows Setup and Deployment affected versions not specified Description A missing authentication requirement for a critical function allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no...

PT-2026-111619

🚨 CVE-2026-107917 Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research...

Microsoft Windows: CVE-2026-83509: Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83505: Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-73027: Windows Setup Files Cleanup Elevation of Privilege Vulnerability

External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83510: Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

CVE-2026-83509: Untrusted Search Path

Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

CVE-2026-97793: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...

PT-2026-112412

Name of the Vulnerable Software and Affected Versions Windows Setup Files Cleanup affected versions not specified Description A time-of-check time-of-use toctou race condition exists in Windows Setup Files Cleanup. This occurs when a program checks the state of a resource before using it, but the...

CVE-2026-107917: Improper Input Validation

Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a...

CVE-2026-107918: Improper Input Validation

Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in a controlled research environment using a...

PT-2026-111620

🚨 CVE-2026-107918 Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in a controlled research...

Microsoft Windows: CVE-2026-97793: Windows Setup and Deployment Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...

CVE-2026-83510: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

CVE-2026-83505: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

CVE-2026-73027: External Control of System or Configuration Setting

External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

PT-2026-112396

Name of the Vulnerable Software and Affected Versions Windows Setup Files Cleanup affected versions not specified Description External control of system or configuration settings allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information...

PT-2026-112411

Name of the Vulnerable Software and Affected Versions Windows Setup Files Cleanup affected versions not specified Description An untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information...

CVE-2026-44828

The open-source static blog editor Qexo versions 4.0.0 through 4.2.0 is vulnerable to an authentication bypass in the init_step_api component. The /api/init_step/ endpoint lacks proper authorization and a setup-completion guard, allowing an unauthenticated requester with a valid CSRF token to res...

CVE-2026-44828 Qexo initialization endpoint can reset setup state and expose stored credentials

Qexo is an open source online editor for static blogs. From 4.0.0 until 4.2.0, Qexo exposes /api/initstep/ through initstepapi without authentication, authorization, or a setup-completion guard. An unauthenticated requester with a valid CSRF token obtained from a public page can submit the first...