PT-2026-2000

Name of the Vulnerable Software and Affected Versions Langflow affected versions not specified Description A flaw exists in Langflow that allows remote attackers to execute arbitrary code. Authentication is not required for exploitation. The issue stems from the inclusion of functionality from an...

PT-2026-1993

Name of the Vulnerable Software and Affected Versions GPT Academic affected versions not specified Description A flaw exists in the run in subprocess wrapper func function that allows remote attackers to execute arbitrary code on affected systems. Authentication is not required for exploitation...

PT-2026-2001

Name of the Vulnerable Software and Affected Versions Langflow affected versions not specified Description A flaw exists in Langflow related to the handling of Python function components, potentially allowing remote attackers to execute arbitrary code on affected systems. An attacker may be able ...

PT-2026-2020

Name of the Vulnerable Software and Affected Versions ALGO 8180 IP Audio Alerter affected versions not specified Description A flaw exists in the handling of the Alert-Info header within SIP INVITE requests. The issue stems from insufficient validation of user-supplied data length before copying ...

PT-2026-1988

Name of the Vulnerable Software and Affected Versions mcp-server-siri-shortcuts affected versions not specified Description This issue allows local attackers to escalate privileges on affected systems. An attacker must first have the ability to execute low-privileged code on the target system. Th...

PT-2026-2018

Name of the Vulnerable Software and Affected Versions ALGO 8180 IP Audio Alerter affected versions not specified Description A flaw exists in the web-based user interface of the ALGO 8180 IP Audio Alerter, allowing remote attackers to disclose sensitive information without authentication. An...

PT-2026-2014

Name of the Vulnerable Software and Affected Versions ALGO 8180 IP Audio Alerter affected versions not specified Description A flaw exists in the SCI module of the ALGO 8180 IP Audio Alerter that allows remote attackers to execute arbitrary code on affected devices. Authentication is required for...

PT-2026-1999

Name of the Vulnerable Software and Affected Versions Langflow affected versions not specified Description A flaw exists in Langflow that allows remote attackers to execute arbitrary code. This does not require authentication. The issue is due to insufficient validation of user-supplied input...

PT-2026-2021

Name of the Vulnerable Software and Affected Versions ALGO 8180 IP Audio Alerter affected versions not specified Description A heap-based buffer overflow in the ALGO 8180 IP Audio Alerter can lead to remote code execution. This is a zero-day vulnerability. Recommendations At the moment, there is ...

PT-2026-2017

Name of the Vulnerable Software and Affected Versions ALGO 8180 IP Audio Alerter affected versions not specified Description A flaw exists in the web-based user interface of the ALGO 8180 IP Audio Alerter, allowing remote attackers to disclose sensitive information. Authentication is not required...

PT-2026-2010

Name of the Vulnerable Software and Affected Versions ALGO 8180 IP Audio Alerter affected versions not specified Description A flaw exists in the web-based user interface of the ALGO 8180 IP Audio Alerter that allows remote attackers to execute arbitrary code. Authentication is required for...

PT-2026-1996

Name of the Vulnerable Software and Affected Versions Open WebUI affected versions not specified Description A flaw exists in the load tool module by id function of Open WebUI that allows remote attackers to execute arbitrary code. Authentication is required for exploitation. The issue stems from...

PT-2026-2002

Name of the Vulnerable Software and Affected Versions Langflow affected versions not specified Description A flaw exists in the disk cache service of Langflow that allows remote attackers to execute arbitrary code on affected installations. Authentication is required for exploitation. The issue...

PT-2026-1991

Name of the Vulnerable Software and Affected Versions Foundation Agents MetaGPT affected versions not specified Description A flaw exists in the actionoutput str to mapping function that allows remote attackers to execute arbitrary code on affected systems. Authentication is not required for...

PT-2026-1994

Name of the Vulnerable Software and Affected Versions GPT Academic affected versions not specified Description A flaw exists that allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Authentication is not required to exploit this issue. The vulnerability is...

PT-2026-1985

Name of the Vulnerable Software and Affected Versions gemini-mcp-tool affected versions not specified Description The gemini-mcp-tool software contains a critical flaw in the execAsync method that allows for unauthenticated remote code execution RCE. This issue stems from a lack of proper input...

PT-2026-2011

Name of the Vulnerable Software and Affected Versions ALGO 8180 IP Audio Alerter affected versions not specified Description A flaw exists in the web-based user interface of the ALGO 8180 IP Audio Alerter that allows remote attackers to execute arbitrary code. Authentication is required for...

PT-2026-2005

Name of the Vulnerable Software and Affected Versions Discord Client affected versions not specified Description A local privilege escalation issue exists in Discord Client due to an uncontrolled search path element within the discord rpc module. This allows a local attacker who has already...

PT-2026-1990

Name of the Vulnerable Software and Affected Versions Foundation Agents MetaGPT affected versions not specified Description A flaw exists in the deserialize message function that allows remote attackers to execute arbitrary code on affected systems. Authentication is not required for exploitation...

PT-2026-1992

Name of the Vulnerable Software and Affected Versions GPT Academic affected versions not specified Description A flaw exists in the stream daas function that allows remote attackers to execute arbitrary code on affected systems. This is due to insufficient validation of user-supplied data, leadin...