PT-2026-78889

Name of the Vulnerable Software and Affected Versions Royal Addons for Elementor versions prior to 1.7.1066 Description Insufficient sanitization of custom widget markup occurs before it is written to a file that is subsequently executed. This allows users with the manage options capability, as...

PT-2026-72580

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the IPv6 forwarding information base fib6 during multi-batch dumps. The inet6 dump fib function saves progress using a positional index in cb-args1. ...

PT-2026-72655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the rpcrdma xprt connect function ignores the return value of frwr wp create. The frwr wp create function is responsible for creating a singleto...

PT-2026-72103

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Improper neutralization of special elements in a command allows a remote attacker to execute arbitrary CL Control Language commands. CL is a command-line interface used to manage system...

PT-2026-69170

Name of the Vulnerable Software and Affected Versions Appointment Hour Booking versions prior to 1.5.88 Description The plugin fails to validate the booking price provided by the client against the service price configured on the server. This allows unauthenticated users to submit an arbitrary...

PT-2026-66891

Name of the Vulnerable Software and Affected Versions SendPulse Email Marketing Newsletter versions prior to 2.2.6 Description Insufficient input sanitization and output escaping allow authenticated attackers with contributor-level access or higher to perform Stored Cross-Site Scripting XSS. An...

PT-2026-66771

Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions 1.0 through 9.16 pgAdmin 4 versions 5.0 through 9.16 Description An issue exists where schema, table, publication, and subscription names sourced from pg catalog via the browser tree are not properly escaped. Because...

PT-2026-65878

Name of the Vulnerable Software and Affected Versions GitLab EE versions 19.1 through 19.1.2 GitLab EE versions 19.2 through 19.2.0 Description An issue exists where an authenticated user could bypass tool governance policies configured by an administrator. This occurs due to improper authorizati...

PT-2026-65853

Name of the Vulnerable Software and Affected Versions Logging operator versions prior to 6.6.0 Description The Fluentd configuration renderer FluentRender in pkg/sdk/logging/model/render/fluent.go writes Custom Resource Definition CRD strings directly into the fluent.conf file without proper...

PT-2026-64991

Name of the Vulnerable Software and Affected Versions VeloCloud Orchestrator VCO on-prem affected versions not specified Description A security issue in the on-premises version of the orchestrator allows a remote attacker to access privileged internal functionality, which may lead to OS command...

PT-2026-65322

Name of the Vulnerable Software and Affected Versions BackWPup versions prior to 5.7.5 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendations Update BackWPup to version...

PT-2026-64164

Name of the Vulnerable Software and Affected Versions AWS Bedrock AgentCore Python SDK versions prior to 1.18.1 Description Improper neutralization of argument delimiters in the install packages method allows a remote authenticated user to execute arbitrary commands within the Code Interpreter...

PT-2026-67419

Name of the Vulnerable Software and Affected Versions GitPython versions prior to 3.1.53 Description Improper escaping of section names in git config files allows the injection of arbitrary configuration directives through malicious submodule names. By utilizing the create submodule or clone from...

PT-2026-60840

Name of the Vulnerable Software and Affected Versions openRISC OR1200 commit 83ac6b Description An output mismatch exists between the Register Transfer Level RTL, which is a high-level description of the electronic circuit, and the netlist, which is a detailed description of the circuit's...

PT-2026-60720

The NEX-Forms WordPress plugin before 9.2.3 does not sanitise and escape some submitted form data before storing it and outputting it back in the admin dashboard, leading to a Stored Cross-Site Scripting vulnerability which could allow unauthenticated users to perform Stored Cross-Site Scripting...

PT-2026-60443

The Themify Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.7.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level...

PT-2026-60559

Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /v1/step-files/signed download endpoint verified the supplied JWT against the shared signing secret but did not check the token's audience, and combined with a missing null-check on the decoded fileId, this allow...

PT-2026-60205

Name of the Vulnerable Software and Affected Versions Metabase versions 1.54.0 through 1.54.23 Metabase versions 1.55.x prior to 1.55.24 Metabase versions 1.56.x prior to 1.56.25 Metabase versions 1.57.x prior to 1.57.19 Metabase versions 1.58.x prior to 1.58.14 Metabase versions 1.59.x prior to...

PT-2026-60191

FastGPT is a knowledge-based AI application platform. In 4.15.0-beta4, FastGPT plugin invoke reverse-call endpoints under /api/invoke/ authenticate only by verifying a JWT signed with INVOKE TOKEN SECRET, which defaults to the constant string token and was not set in official deployment templates...

PT-2026-60366

Name of the Vulnerable Software and Affected Versions systeminformation versions prior to 5.31.7 Description On Linux, the networkInterfaces function is susceptible to OS command injection. The issue occurs when the library processes the Debian/Ubuntu interfaces5 source directive. Specifically, t...

PT-2026-58420

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description An untrusted pointer dereference in the Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally, potentially affecting the...

PT-2026-58048

Sustainable Irrigation Platform SIP through version 5.2.16 contains a command injection vulnerability in the optional cli control plugin that allows unauthenticated or cross-site request forgery attackers to execute arbitrary operating-system commands by storing a malicious payload via the plugin...

PT-2026-57838

Name of the Vulnerable Software and Affected Versions Blender versions 3.0.0 through 5.1.2 Description An out-of-bounds read occurs when processing a crafted .blend file containing a malicious signed short member index value within the SDNA block. The member index field is used as an array index...

PT-2026-57680

Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 through 1.2.1. Users are recommended to upgrade to...

PT-2026-59313

Summary motionEye v0.43.1 latest stable is vulnerable to path traversal in the picture and movie API endpoints, like /picture/id/preview/filename. Neither the API handlers, nor the mediafiles.py functions like get media preview check for .. sequences in the filename parameter, except get media...

PT-2026-57524

Name of the Vulnerable Software and Affected Versions H3C NX15 version V100R017 Description A flaw exists in the Administrator Password Modification Endpoint within the change passwd function of the '/api/login/modify' endpoint. Remote manipulation of the newPass argument can lead to weak passwor...

PT-2026-56277

Name of the Vulnerable Software and Affected Versions LiquidFiles version 4.2.7 Description An HTML injection issue exists in the file view endpoint. This allows authenticated attackers to execute arbitrary JavaScript within the victim's browser by uploading a specially crafted HTML file and...

PT-2026-56084

Name of the Vulnerable Software and Affected Versions 9Router versions prior to 0.4.80 Description The dashboard login rate limiter derives client identity from the X-Forwarded-For HTTP header, which is controlled by the user. When the application is directly exposed or deployed behind a reverse...

PT-2026-55794

Name of the Vulnerable Software and Affected Versions cve-search affected versions not specified Description An unauthenticated improper input validation issue exists in the 'POST /fetch cve data' endpoint. A remote attacker can manipulate request parameters that control the MongoDB collection,...

PT-2026-55626

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description A use after free issue exists that allows an unauthorized attacker to execute arbitrary code over a network. Use after free is a memory corruption flaw that occurs when ...

PT-2026-55504

Name of the Vulnerable Software and Affected Versions Apache Lucene.Net.Replicator versions 4.8.0-beta00005 through 4.8.0-beta00017 Description A path traversal issue exists in the Lucene.Net.Replicator library due to improper input validation and sanitization of filesystem paths. This allows...

PT-2026-55311

Name of the Vulnerable Software and Affected Versions pdfcpu versions prior to 0.11.2 Description A denial-of-service issue exists where the parser descends recursively through nested PDF objects, including arrays, without enforcing a maximum nesting depth. This occurs within the ParseObjectConte...

PT-2026-54518

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in SkyBridge MB-A100/MB-A110. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product with an administrative privilege...

PT-2026-54441

Name of the Vulnerable Software and Affected Versions CefSharp versions prior to 148.0.90 Description CefSharp provides .NET bindings for the Chromium Embedded Framework. The FolderSchemeHandlerFactory class fails to properly enforce directory boundaries when validating if a decoded and...

PT-2026-53410

ID: NFLX-2024-002 Impact Authenticated users can achieve limited RCE in ConsoleMe, restricted to flag inputs on a single CLI command. Due to this constraint, it is not currently known whether full RCE is possible but it is unlikely. However, a specific flag allows authenticated users to read any...

PT-2026-52982

Name of the Vulnerable Software and Affected Versions Koha Library Management System versions 0 through 25.11 Description A stored cross-site scripting XSS issue exists in the OPAC item detail page. An authenticated remote attacker with edit items permission can inject arbitrary web scripts throu...

PT-2026-52774

Unauthenticated SQL Injection in JetEngine = 3.8.10.2 versions...

PT-2026-52799

Administrator SQL Injection in WP All Import = 4.0.1 versions...

PT-2026-51208

Name of the Vulnerable Software and Affected Versions BerriAI litellm versions prior to 1.82.3 Description An authentication bypass exists in the SSO Debug Flow component. A remote attacker can manipulate the json.dumps function within the file litellm/proxy/management endpoints/ui sso.py, which...

PT-2026-51127

Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print attribute UTF8STRING path. print attribute copies a UTF8STRING ASN.1 attribute value into a heap buffer sized exactly to its declared length via strncpy, leaving no NUL terminator. Downstream callers run strlen ...

PT-2026-50896

Name of the Vulnerable Software and Affected Versions Apache APISIX versions 3.5.0 through 3.16.0 Description An authentication bypass issue exists in the opa plugin. An attacker can relay spoofed identity headers to upstream services by exploiting non-default configurations in the opa plugin,...

PT-2026-50948

Name of the Vulnerable Software and Affected Versions GridTime 3000 versions 1.0r0.03 through 1.1r0.0 Description The GridTime 3000 GNSS Time Server contains an open redirect issue within the password change form submission. An open redirect occurs when an application takes a user-provided URL an...

PT-2026-50823

Name of the Vulnerable Software and Affected Versions armeria-xds versions 1.38.0 through 1.39.0 Description DataSourceStream in the xDS module resolves filename and environment variable fields from SDS Secret resources without an allow-list or base-directory confinement. This allows a compromise...

PT-2026-49988

Name of the Vulnerable Software and Affected Versions JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.2 Description An issue exists in the Enterprise Infrastructure Security component of Oracle JD Edwards. This flaw allows an unauthenticated attacker with network access via JDENET ...

PT-2026-49938

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 14.1.2.0.0 Description An issue in the Content Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the system. The exploitation requires...

PT-2026-50077

Name of the Vulnerable Software and Affected Versions Adobe Acrobat PDF Extension Chrome versions prior to 26.5.2.3 Description A UXSS-class cross-origin data disclosure issue exists where an attacker can gain access to the victim's session data. UXSS Universal Cross-Site Scripting is a type of...

PT-2026-56631

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.115 Description A use after free issue in Ozone allows a remote attacker to potentially exploit heap corruption through a crafted HTML page. Use after free is a memory corruption flaw that occurs when...

PT-2026-49412

Unauthenticated Broken Access Control in wpForo Forum 3.0.2 versions...

PT-2026-49149

Name of the Vulnerable Software and Affected Versions Microweber versions prior to 2.0.21 Description A path traversal issue exists in the API Endpoint component. A remote attacker can manipulate the cache path relative argument within the userfiles path function of the '/api nosession/thumbnail...

PT-2026-49087

Name of the Vulnerable Software and Affected Versions Canvas plugin for WordPress versions prior to 2.5.3 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access or higher can inject arbitrary...