PT-2026-92327

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A permission bypass exists in multiple locations due to a missing permission check. This flaw allows for local escalation of privilege without requiring...

PT-2026-92333

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A logic error in the code allows for a permission bypass in multiple locations. This issue can lead to local escalation of privilege, granting System execution...

PT-2026-92360

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A race condition in multiple locations may lead to a use-after-free scenario, where the system continues to use a memory address after it has been freed. This...

PT-2026-92348

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description A heap buffer overflow exists in the gf ta test set config function within the gf ta test.c file due to a logic error. This flaw allows for local escalation of privilege without...

CVE-2026-76670: Improper Privilege Management

Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise...

CVE-2026-76669: Improper Privilege Management

Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise...

PT-2026-92342

In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

ROS-20260915-73-0067

The vulnerability of the TabGroups function in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to replace the user interface through malicious network traffic...

PT-2026-92095

Name of the Vulnerable Software and Affected Versions Vikunja versions prior to 2.6.0 Description Improper validation of link-share tokens in the v2 API user search endpoints allows attackers possessing a read-only share link to enumerate project users through the 'projects' endpoint and verify t...

PT-2026-92366

In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92393

Concrete CMS before 9.5.3 did not enforce a per-page authorization check when reordering pages from the sitemap. In the sitemap Explore dashboard controller, the send to top and send to bottom reorder tasks ran after only a generic sitemap-access check; the controller loaded the page named by the...

CVE-2026-88765: Improper Neutralization of Special Elements used in a Command

GitLab has remediated an issue in GitLab EE affecting all versions from 12.3 to 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 under certain conditions could allow an authenticated user to achieve remote code execution by importing a specially crafted Git project export to overflow the Unicod...

PT-2026-93098

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.16 Description An issue in the Core component allows an unauthenticated attacker with access to the infrastructure where the software executes to compromise the system. Exploitation requires human interaction a...

PT-2026-92359

In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92309

In multiple locations, there is a possible permission bypass due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79300

Incorrect privilege assignment in the admin user-management component of Webkul Bagisto 2.4.9 allows an authenticated backend user holding only the settings.users.edit permission to escalate to full administrator. The user-update endpoint route admin.settings.users.update, UserController::update...

ROS-20260915-73-0056

The vulnerability of Microsoft Edge and Google Chrome browser user interfaces is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to replace the interface with a specially created HTML page...

PT-2026-92329

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A logic error in the code across multiple locations allows for a local escalation of privilege. This issue enables an attacker to gain System execution privileg...

PT-2026-92667

Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM component: Order Management. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps -...

PT-2026-92308

Name of the Vulnerable Software and Affected Versions Cellular Modem affected versions not specified Description A logic error in the code allows for possible information disclosure. This flaw could be leveraged to achieve remote code execution without requiring additional execution privileges or...