BIT-DOTNET-2026-62898 Microsoft QUIC Information Disclosure Vulnerability

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...

BIT-DOTNET-2026-62886 .NET Elevation of Privilege Vulnerability

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally...

BIT-DOTNET-SDK-2026-62886 .NET Elevation of Privilege Vulnerability

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally...

curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

A flaw was found in curl. This vulnerability allows curl to wrongly reuse an existing HTTP proxy connection when performing a CONNECT request to a server, even if the new request uses different authentication credentials for the HTTP proxy. This improper connection reuse could lead to an attacker...

CVE-2026-50601

A security vulnerability has been identified in the Planet9 desktop application where a hardcoded read-only API key permitted unauthorized access to internal repositories. An attacker could exploit this access to extract embedded administrative keys and secrets, potentially allowing them to gain...

CVE-2026-50601

A security vulnerability has been identified in the Planet9 desktop application where a hardcoded read-only API key permitted unauthorized access to internal repositories. An attacker could exploit this access to extract embedded administrative keys and secrets, potentially allowing them to gain...

MINI-QVCP-G74M-VQX9

Bulletin has no description...

MINI-8FVP-8GC8-GQ83

Bulletin has no description...

PT-2026-73262

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally...

CVE-2026-42163

Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability LTI under certain circumstances. This applies to LTI 1.1 and LTI 1.3 Advantage...

The vulnerability of the Apache Tomcat application server, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Apache Tomcat application server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2026-73265

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-73317

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and...

The vulnerability of the Apache Tomcat application server, related to the implementation of incorrect control flow management, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Apache Tomcat application server is related to the implementation of incorrect control flow management. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

PT-2026-76682

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.1.6 Discourse versions prior to 2026.5.2 Discourse versions prior to 2026.6.1 Discourse versions prior to 2026.7.0 Description Users permitted to view group activity but restricted from seeing shared drafts can...

PT-2026-76868

Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability LTI under certain circumstances. This applies to LTI 1.1 and LTI 1.3 Advantage...

CVE-2026-42163

Mahara (e-portfolio platform) before versions 25.04.5 and 26.04.0 allows unauthenticated attackers to gain unauthorized access to internal accounts through flaws in LTI 1.1 and LTI 1.3 Advantage integrations. CISA's SSVC assessment marks it "Automatable: yes" and "Technical Impact: total" but con...

CVE-2026-42164

Mahara (e-portfolio platform) versions before 25.04.5 and 26.04.0 have a flaw in the Text block/section functionality: a crafted call can recall backed-up content from another user's Text section. This enables unauthorized access to confidential data with integrity and availability impacts. CVSS ...

PT-2026-76752

Name of the Vulnerable Software and Affected Versions multicloud-operators-subscription affected versions not specified Description A flaw in the multicloud-operators-subscription component allows a user on a managed cluster to escalate privileges. By creating a Subscription with specifically...

PT-2026-76869

Name of the Vulnerable Software and Affected Versions Mahara versions prior to 25.04.5 Mahara versions prior to 26.04.0 Description An issue exists in the Text block/section functionality where a specifically crafted call allows the retrieval of backed-up content from a different Text section,...