PT-2026-85398

A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Service. Such manipulation of the argument file name leads to path traversal. The attack may be performed from remote. The...

CVE-2026-79423

An authenticated remote code execution RCE vulnerability in the adminconfig.php component of seacms v13.6 allows attackers to execute arbitrary code via a crafted POST request...

CVE-2026-71622

CVE-2026-71622 is a SQL injection vulnerability in the User.php component of Zhao-github APiAdmin v.5.0.1 , allowing a remote attacker to obtain sensitive information. The CVSS 3.1 score is 7.4 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N, indicating no privileges are required but ...

PT-2026-85395

A vulnerability was determined in Eleveo Quality Management 9.7.0. Impacted is an unknown function of the file /enc-fwk-data/api/v3/conversations//events of the component Conversation Handler. This manipulation of the argument createdBy causes dynamically-determined object attributes. The attack ...

PT-2026-85401

Name of the Vulnerable Software and Affected Versions FreeIPMI versions prior to 1.6.19 Description A stack-based buffer overflow exists in the ipmi-oem component. The issue occurs within the output dell system info cmc info function located in ipmi-oem/ipmi-oem-dell.c, which is triggered when...

EUVD-2026-71768

An authenticated remote code execution RCE vulnerability in the adminconfig.php component of seacms v13.6 allows attackers to execute arbitrary code via a crafted POST request...

CVE-2026-79423

An authenticated remote code execution RCE vulnerability in the adminconfig.php component of seacms v13.6 allows attackers to execute arbitrary code via a crafted POST request...

CVE-2026-79426

An arbitrary file deletion vulnerability in the /adminapi/file/videodatasave component of CRMEB v6.0.0 allows authenticated attackers to delete arbitrary files via crafted POST request...

PT-2026-86253

A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function ChatCompletion.create of the file g4f/ init .py of the component Authentication Check. Such manipulation leads to missing authentication. The attack may be...

PT-2026-86239

A security vulnerability has been detected in jofpin trape 2.0. This vulnerability affects unknown code of the file core/user.py of the component Telemetry Endpoint. Such manipulation of the argument vId leads to race condition. The attack can be executed remotely. Attacks of this nature are high...

CVE-2026-84963

An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success and returns no error. An unauthenticat...

CVE-2026-84292

fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host components are escaped but the port is concatenated verbatim, so a port value that is not a sequence of digits can inject authority delimiters, demoting the intended host t...

PT-2026-86249

An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106188)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106188 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...

Linux Distros Unpatched Vulnerability : CVE-2026-76925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerabili...

RHEL 9 : kernel (RHSA-2026:63129)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:63129 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: smc: Fix use-after-free in...

The vulnerability of the AppAuthentication::verifyCode() method in the packages/panels/src/Auth/MultiFactor/App/AppAuthentication.php file of the component set for the accelerated development of the Filament PHP framework Laravel allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the AppAuthentication::verifyCode method in the packages/panels/src/Auth/MultiFactor/App/AppAuthentication.php file of the Filament PHP framework’s Laravel set is related to the possibility of bypassing the authentication process. Exploiting this vulnerability could allow an...

The vulnerability of the TableNG component of the Grafana monitoring and observation platform allows a hacker to execute arbitrary code.

The vulnerability of the TableNG component of the Grafana monitoring and observation platform is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the aa_sock_msg_perm() function in the security/apparmor/lsm.c module of the AppArmor security component for the Linux operating system allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the aasockmsgperm function in the security/apparmor/lsm.c module of the AppArmor security component of the Linux operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrit...

The vulnerability of the EXPORT_SYMBOL_GPL() function in the net/netfilter/nfnetlink.osf.c module of the Linux kernel’s netfilter component, which allows a hacker to cause a service failure.

The vulnerability of the EXPORTSYMBOLGPL function in the net/netfilter/nfnetlink.osf.c module of the netfilter kernel of the Linux operating system is related to pointer manipulation. Exploitation of this vulnerability could allow a remote attacker to cause a service failure...