PT-2026-78240

Name of the Vulnerable Software and Affected Versions 4gaBoards versions prior to 3.3.9 Description An authenticated user can modify backend-managed identity attributes via the 'PATCH /api/users/:id' endpoint. This occurs because the whitelist in the update.js controller allows mass assignment of...

PT-2026-76911

Name of the Vulnerable Software and Affected Versions OpenBoxes versions prior to 0.9.2 Description An unrestricted upload issue exists within the Document Upload Controller component. A remote attacker can exploit the DocumentController function located in the...

PT-2026-77316

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio terminal SSH key authentication in custom components/blueprint studio/backend/terminal manager.py wrote SSH private-key material to a file under the Home Assistant configuration...

PT-2026-77301

Froxlor is open source server administration software. Prior to 2.3.8, the DomainZones.add API command in lib/Froxlor/Api/Commands/DomainZones.php accepts user-controlled record and type values without rejecting line delimiters, tab characters, semicolons, or unsupported DNS record types before...

PT-2026-78069

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM MCAD Connector version 3.6 Description An issue exists in the CAX Client component of the Oracle Agile PLM MCAD Connector. An unauthenticated attacker with access to the physical communication segment attached to the hardware...

PT-2026-77266

Kurrier is a modern, self-hosted workspace for email, calendar, contacts, and storage. Prior to 1.2.4, Kurrier API endpoints for listing and retrieving webhook and identity resources did not enforce ownership checks for authenticated API requests. An attacker with a valid API key could use anothe...

Fixed in Apache Tomcat 11.0.25

Low: Authenticated WebSocket session survives end of HTTP session CVE-2026-73180 If the session ID for an authenticated HTTP session was changed after a WebSocket connection had been established under that authenticated HTTP session, the WebSokcet session would not be closed as required by the...

PT-2026-77891

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Data Relationship Management version 11.2.25.0.000 Description An issue exists in the Access and security component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-77176

MyBB is free and open source forum software. Prior to 1.8.40, the calendar module does not validate moderation permissions for the destination calendar when moving events. A user with moderation permission for the source calendar can move an event to a calendar where the user has only viewing...

Oracle Linux 10 : .NET / 10.0 (ELSA-2026-55858)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55858 advisory. 10.0.111-1.0.1 - Add support for Oracle Linux 10.0.111-1 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 Tenable has...

PT-2026-76905

Name of the Vulnerable Software and Affected Versions SourceCodester Onlne Examination & Learning Management System version 1.0 Description An issue exists in an unknown functionality that allows remote attackers to perform cross-site request forgery CSRF, a technique where a user is tricked into...

PT-2026-76914

Name of the Vulnerable Software and Affected Versions AKINSOFT Wolvox9 ERP versions s26.02.17 through 26.02.21 Description An improper limitation of a pathname to a restricted directory, known as Path Traversal, exists in the KontrolPanel.exe component. This flaw allows an attacker to access file...

PT-2026-77565

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Common Events. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion...

PT-2026-77318

Name of the Vulnerable Software and Affected Versions Blueprint Studio versions prior to 2.5.2 Description Backend API handlers in custom components/blueprint studio/backend/api.py return raw exception strings to authenticated Home Assistant users. These exception messages may disclose internal...

Benchmarking Automated Security Patch Backporting: How Far Are We?

Automated security patch backporting is critical for mitigating N-day vulnerabilities. Recent tools report success rates above 80% on their respective datasets. However, these evaluations are often confined to homogeneous environments, such as one repository or specific project versions...

PT-2026-76997

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Firefox ESR versions prior to 140.14 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird ESR versions prior to 140.14 Thunderbird ESR versions prior to 153.1 Description An integer...

CVE-2026-75079

CVE-2026-75079 is a SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 , located in the file /edit_subject2.php . The vulnerability is triggered by manipulating the ID argument, allowing a remote, unauthenticated attacker to execute arbitrary SQL queries. CVSS 3.1...

CVE-2026-69148

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a runid or modelid after validatesourcerun or validatesourcemodel in mlflow/server/handlers.py verifies only path containment, allowing...

CVE-2026-50768

creationtimestamp| type| source ---|---|--- 2026-08-17 22:07:23+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtcpmk7xkz25 2026-08-17 22:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtcpreb54m24...

GHSA-GQCH-G4W5-7QCW MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id

Summary The validatesourcerun and validatesourcemodel functions in mlflow/server/handlers.py verify that a model version source path is within the artifact directory of a specified run or logged model, but do not check whether the caller has READ permission on that run or model. An authenticated...