PT-2026-112716

Name of the Vulnerable Software and Affected Versions Network Device Enrollment Service NDES affected versions not specified Description Weak authentication in the Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network. Recommendations At the momen...

Microsoft Windows: CVE-2026-69802: Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability

Weak authentication in Network Device Enrollment Service NDES allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-69982: Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

Microsoft Windows: CVE-2026-83657: Windows Modern Device Management (MDM) Tampering Vulnerability

Weak authentication in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-70005: Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-112155

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the...

PT-2026-112719

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description Weak authentication in the Windows Projected File System allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no...

PT-2026-112467

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description Weak authentication in Windows Modern Device Management MDM allows an authorized attacker to perform local tampering, which can affect the system. Recommendations...

PT-2026-112869

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description Weak authentication in the Windows Kernel allows an authorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the...

Microsoft Windows: CVE-2026-88101: Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability

Weak authentication in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

PT-2026-112486

Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-85323: Network Device Enrollment Service (NDES) Spoofing Vulnerability

Weak authentication in Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network...

PT-2026-112479

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to perform spoofing over a network, which enables them to affect the system. Recommendations At the moment,...

PT-2026-112084

Name of the Vulnerable Software and Affected Versions Network Device Enrollment Service affected versions not specified Description Weak authentication in the Network Device Enrollment Service NDES allows an unauthorized remote attacker to execute arbitrary code over a network, which can affect t...

PT-2026-112756

Name of the Vulnerable Software and Affected Versions Windows Print Spooler affected versions not specified Description Weak authentication in Windows Print Spooler components allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At...

CVE-2023-54411

Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions...

CVE-2023-54411 Frappe before 13.32.0 Weak Authentication via Print View Key

Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions...

CVE-2023-54411 Frappe before 13.32.0 Weak Authentication via Print View Key

Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions...

CVE-2023-54411

The Frappe framework versions prior to 13.32.0 are vulnerable to weak authentication regarding print view access. The root cause is that the print view key can be derived from data exposed through other whitelisted API endpoints. This allows an attacker to generate a valid key to view documents w...

CVE-2023-54411 Frappe before 13.32.0 Weak Authentication via Print View Key

Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions...