PT-2026-70230

Name of the Vulnerable Software and Affected Versions NETGEAR affected versions not specified Description Insufficient input validation allows authenticated administrators connected to the local network to make unauthorized modifications to the device software and functionality. Recommendations A...

PT-2026-70073

Name of the Vulnerable Software and Affected Versions Axis Signed Video Framework affected versions not specified Description The Signed Video Framework contains a buffer overflow issue, which occurs when a program writes more data to a block of memory than it can hold. This flaw can cause...

PT-2026-70628

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

Intel® Neural Compressor software advisory

Summary: Potential security vulnerabilities for some Intel® Neural Compressor software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-20906 Description: Protection mechanism failure for some...

vLLM Hardware Plugin for Intel® Gaudi® Software Advisory

Summary: A potential security vulnerability for some vLLM Hardware Plugin for Intel® Gaudi® Software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-27765 Description: Improper input validation for...

PT-2026-70782

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user...

PT-2026-70207

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the run-download IPC handler, allowing a compromised renderer process to execute arbitrary local binaries with the application’s...

CVE-2026-51583

An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery SSRF via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address...

PT-2026-70612

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper input validation allows an unauthorized attacker to execute arbitrary code over a network, which can lead to a full system compromise. Recommendations At the...

PT-2026-70377

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interactio...

PT-2026-70021

Name of the Vulnerable Software and Affected Versions SAP Manufacturing Integration and Intelligence MII affected versions not specified Description An attacker with high privileges can submit specially crafted input to certain functionality that is processed without sufficient validation. This...

PT-2026-70756

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

PT-2026-70076

Name of the Vulnerable Software and Affected Versions Samsung Open Source rlottie affected versions not specified Description Improper validation of the specified quantity in input allows for input data manipulation. Recommendations At the moment, there is no information about a newer version tha...

PT-2026-70864

Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description An issue in Queryable Encryption maintenance operations allows an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of da...

PT-2026-70762

Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description Improper input validation in Microsoft Office PowerPoint allows...

PT-2026-70319

Improper input validation for some IntelR Neural Compressor software before version v3.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This...

PT-2026-70087

Name of the Vulnerable Software and Affected Versions Picketlink Federation SAML affected versions not specified Description The unsolicited response handler accepts forged assertions without verification or validation. This allows an unauthenticated attacker to authenticate as any principal in a...

PT-2026-70075

Name of the Vulnerable Software and Affected Versions Samsung Open Source rlottie affected versions not specified Description An issue exists where improper validation of the specified quantity in the input and the allocation of resources without limits or throttling allows for excessive...

PT-2026-70376

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in...

PT-2026-70829

Name of the Vulnerable Software and Affected Versions Coturn versions prior to 4.16.0 Description The dtls server input handler and create new connected udp socket functions in src/apps/relay/dtls listener.c retain the state of the OpenSSL dtls1 reassemble fragment function when processing a...