CVE-2026-50601 Planet9 Hardcoded Credentials Vulnerability Information

A security vulnerability has been identified in the Planet9 desktop application where a hardcoded read-only API key permitted unauthorized access to internal repositories. An attacker could exploit this access to extract embedded administrative keys and secrets, potentially allowing them to gain...

MINI-QVCP-G74M-VQX9

Bulletin has no description...

MINI-8FVP-8GC8-GQ83

Bulletin has no description...

CVE-2026-42163

Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability LTI under certain circumstances. This applies to LTI 1.1 and LTI 1.3 Advantage...

PT-2026-76813

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17, a user with the users.invite user permission can submit an existing member to POST /api/v1/users/users/invite/, causing the organization invitation logic in apps/users/api/user.py t...

PT-2026-73262

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally...

PT-2026-73261

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

PT-2026-73265

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-76682

Discourse is an open-source discussion platform. Prior o 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, users who were allowed to view a group’s activity, but were not permitted to see shared drafts, could still receive shared-draft entries through the group posts and group mentions endpoints. This...

PT-2026-76868

Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability LTI under certain circumstances. This applies to LTI 1.1 and LTI 1.3 Advantage...

PT-2026-76869

Name of the Vulnerable Software and Affected Versions Mahara versions prior to 25.04.5 Mahara versions prior to 26.04.0 Description An issue exists in the Text block/section functionality where a specifically crafted call allows the retrieval of backed-up content from a different Text section,...

CVE-2026-42164

Mahara (e-portfolio platform) versions before 25.04.5 and 26.04.0 have a flaw in the Text block/section functionality: a crafted call can recall backed-up content from another user's Text section. This enables unauthorized access to confidential data with integrity and availability impacts. CVSS ...

PT-2026-73275

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-73266

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

PT-2026-73272

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally...

PT-2026-73276

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

PT-2026-73277

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-73278

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

PT-2026-73271

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

CVE-2026-42163

Mahara (e-portfolio platform) before versions 25.04.5 and 26.04.0 allows unauthenticated attackers to gain unauthorized access to internal accounts through flaws in LTI 1.1 and LTI 1.3 Advantage integrations. CISA's SSVC assessment marks it "Automatable: yes" and "Technical Impact: total" but con...