PT-2026-96712

Name of the Vulnerable Software and Affected Versions ManageEngine ADSelfService Plus versions prior to build 7001 Description A remote code execution issue exists in the GINA client, which could lead to full system compromise. Recommendations Update to build 7001...

PT-2026-96800

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers to execute arbitrary shell commands as root by exploiting an undocumented...

PT-2026-96844

Name of the Vulnerable Software and Affected Versions Netdata versions 2.0.0 through 2.10.3 Description During the MSI repair process of the Netdata Windows Agent, powershell.exe is executed with SYSTEM privileges without the -NoProfile flag. This causes the system to load the Microsoft.PowerShel...

Langflow AI Auth Blind Command Injection

Langflow versions 1.5.0 through 1.9.0 are susceptible to authenticated blind command injection due to a flaw in how the Langflow STDIO service launches processes through system shells. OS commands are executed under the context of the running Langflow process. Module Options msf use...

CVE-2026-34689: Improper Limitation of a Pathname to a Restricted Directory

Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

PT-2026-99638

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.57-1.1 Description A security issue exists that allows attackers to affect the system. Recommendations Update to version 154.0.8037.57-1.1...

The like Trap: Multi-Stage Poisoning against Agents in Similarity-Based Recommendation Systems

With recent advancements in large language models LLMs and LLM-based agents, these agents are becoming increasingly autonomous and gaining broader access to act on users' behalf on the internet. However, the vulnerability of automated agents deployed on social media platforms e.g., for managing a...

CVE-2026-96259: Server-Side Request Forgery (SSRF)

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to apply the internal-connection filter to OAuth endpoint requests, which allows a System Administrator to make the server issue requests to internal network addresses and read the responses via the...

PT-2026-96803

Name of the Vulnerable Software and Affected Versions SLC8000 versions prior to 9.7.0.2 SLC9000 versions prior to 9.7.0.2 EMG8500 versions prior to 9.7.0.1 EMG7500 versions prior to 9.7.0.1 SLB882 affected versions not specified SLCx-03 affected versions not specified SLCx-02 affected versions no...

PT-2026-99666

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.57-1.1 Description A security issue exists that allows attackers to affect the system. Recommendations Update to version 154.0.8037.57-1.1...

PT-2026-99678

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.57-1.1 Description A security issue exists that allows attackers to affect the system. Recommendations Update to version 154.0.8037.57-1.1...

UBUNTU-CVE-2026-55567

BleachBit cleans files to free disk space and to maintain privacy. Prior to 6.0.1, privileged Windows cleaning does not lock and validate a target's parent directory before deletion. A local unprivileged user can replace that directory with a Windows junction and use a native symlink to redirect...

APSB26-150 : Security update available for Adobe Connect

Adobe has released a security update for Adobe Connect. This update resolves critical and important vulnerabilities that could result in arbitrary code execution, arbitrary file system read, privilege escalation, and security feature bypass. Adobe is not aware of any exploits in the wild for any ...

PT-2026-99619

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.57-1.1 Description A security issue exists that allows attackers to affect the system. Recommendations Update to version 154.0.8037.57-1.1...

PT-2026-99647

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.57-1.1 Description A security issue exists that allows attackers to affect the system. Recommendations Update to version 154.0.8037.57-1.1...

CVE-2026-80146: Stack-based Buffer Overflow

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a stack-based buffer overflow vulnerability that allows authenticated attackers to potentially execute arbitrary code by exploiting an...

PT-2026-97117

Name of the Vulnerable Software and Affected Versions itsourcecode Leave Management System version 1.0 Description A remote SQL injection exists in the /module/leavetype/index.php endpoint. The issue occurs when the ID argument is manipulated, allowing an attacker to execute arbitrary SQL command...

Malicious code in @zig-design-system/react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1247992d3c2b02f93cea726189a4ff0a25eef9535b2a34eb7a120f8c9496f67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @zig-design-system/react

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-16372 Malicious code in @zig-design-system/react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1247992d3c2b02f93cea726189a4ff0a25eef9535b2a34eb7a120f8c9496f67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...