PT-2026-92174

Name of the Vulnerable Software and Affected Versions Dell Wyse Management Suite versions prior to 2605.0.3.683 Description A missing cryptographic step allows a high privileged attacker with remote access to potentially perform information tampering. Recommendations Update to version 2605.0.3.68...

PT-2026-86950

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Message Server affected versions not specified Description SAP NetWeaver Message Server fails to sufficiently validate the authenticity of internal application server components during the registration process. An unauthenticated...

PT-2026-84393

Missing Authorization CWE-862 in the Kibana Entity Store feature can lead to unauthorized credential creation via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user holding only low-privilege Security feature access could invoke an administrative operation tha...

PT-2026-83293

Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/ route that lacks requestValidator middleware. Attackers can set the x-portkey-custom-host header to internal addresses and forward requests with Authorization headers to reach internal service...

PT-2026-82696

Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. Spring for GraphQL 2.0.0 - 2.0.4...

PT-2026-82657

Name of the Vulnerable Software and Affected Versions DNG SDK versions 1.7.1 2502 and earlier Description An out-of-bounds write issue exists where memory corruption can occur, potentially leading to a denial-of-service state where the application crashes or becomes unresponsive. This occurs when...

PT-2026-82279

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can...

PT-2026-80852

The Mercado Pago Node.js SDK interpolates caller-supplied identifiers into API request paths without percent-encoding them, so characters that are structural in a URL survive into the outgoing request. The payment get, capture, cancel, paymentRefund create, total, list, get, advancedPayment get,...

PT-2026-79799

Name of the Vulnerable Software and Affected Versions exceljs-hardened versions prior to 5.0.0 Description The software decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. This allows attackers to upload highly compresse...

PT-2026-78640

Improper input validation in ajaxSet wireless network configuration.jst in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows an authenticated attacker to cause denial of service via a crafted ssid number parameter...

PT-2026-78555

Name of the Vulnerable Software and Affected Versions Orval versions prior to 8.21.0 Description Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. A flaw exists where a $... expression or backtick in a query parameter default is emitted into...

PT-2026-78487

Name of the Vulnerable Software and Affected Versions Grav Login Plugin versions prior to 3.8.11 Description The login.regenerate2FASecret task fails to verify if a user is authorized, checking only for the existence of a pending-session user. An attacker who has obtained a victim's password can...

PT-2026-77313

Name of the Vulnerable Software and Affected Versions Blueprint Studio versions prior to 2.5.2 Description Blueprint Studio fails to consistently enforce the admin-only authorization boundary on its backend, allowing any authenticated Home Assistant user to access actions intended for...

PT-2026-73215

A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps Chronicle SOAR versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to execute blind SQL queries using a crafted request parameter. This vulnerability was patched in version...

PT-2026-76818

Name of the Vulnerable Software and Affected Versions JumpServer versions 4.8.0 through 4.10.16 Description An authenticated user with SFTP permission to an authorized asset can submit crafted traversal paths through the KoKo Web Terminal SFTP feature. This causes the AssetDir.GetRealPath functio...

PT-2026-73088

Name of the Vulnerable Software and Affected Versions Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution versions prior to 5.4.13 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. This allows...

PT-2026-72858

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the drm/rockchip: inno-hdmi driver. The driver uses drmm encoder init to initialize the encoder and drmm add action to register drm encoder cleanup for...

PT-2026-72713

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu dma map sg function when handling PCI P2PDMA cases. The DMA length of the current scatterlist segment s is incorrectly assigned from the head entry sg-length...

PT-2026-72868

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the rxrpc component when using the recvmsg function with the MSG PEEK flag. The rxrpc recvmsg function fails to drop the reference it holds on a call that has...

PT-2026-69267

Name of the Vulnerable Software and Affected Versions Nexter Blocks versions prior to 5.0.2 Description Insufficient access control in a REST endpoint allows users with the Contributor role or higher to save arbitrary global CSS. This stored CSS is rendered site-wide on the front end, which can...

PT-2026-67451

Name of the Vulnerable Software and Affected Versions Omada devices affected versions not specified Description A certification validation weakness exists in the communication between affected devices and cloud controllers. The certificate identity verification process fails to adequately validat...

PT-2026-67542

Name of the Vulnerable Software and Affected Versions Tenable Sensor Proxy versions prior to 1.4.2 Description A flaw in Tenable Sensor Proxy enables a remote attacker to execute code with elevated privileges. This is achieved by tricking an operator into connecting the sensor to a host controlle...

PT-2026-65611

Name of the Vulnerable Software and Affected Versions datamodel-code-generator versions 0.52.1 through 0.60.1 Description When using Pydantic v2 output mode, the software improperly handles data from the --extra-template-data file. Specifically, the process validators function in src/datamodel co...

PT-2026-65571

Name of the Vulnerable Software and Affected Versions CRIU affected versions not specified Description An issue exists in the handling of restartable sequences rseq during the checkpoint/restore process. A malicious process within a container can register an rseq critical section to hijack the...

PT-2026-65140

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description Improved memory handling addresses a flaw where a remote user could cause unexpected system termination or corrupt kern...

PT-2026-64198

Name of the Vulnerable Software and Affected Versions Pronetiqs IntraVUE versions 3.2.1a14 and earlier Description An exposure of sensitive system information to an unauthorized control sphere allows unauthenticated users to perform asset discovery. Recommendations Update Pronetiqs IntraVUE to a...

PT-2026-63334

The servereye client also known as sensorhub, technically ClientAgentContainerService versions 20.15 and earlier are vulnerable to Local Privilege Escalation. The high-privileged service SE3Recovery EmergencyRecoveryService.exe, running as SYSTEM, periodically monitors the directory...

PT-2026-63481

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the BSON CodeWScope element accessors enables an authenticated user to trigger an out-of-bounds heap read through a crafted aggregation...

PT-2026-62578

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: PeopleSoft Applications. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2026-62603

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Runtime Tools component of Oracle WebCenter Portal allows a low privileged attacker with network access via HTTP to compromise the...

PT-2026-61508

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 8.0.6 Description An issue was identified in Suricata that requires a security update. Recommendations Update to version 8.0.6...

PT-2026-60753

Name of the Vulnerable Software and Affected Versions HCL Aftermarket EPC affected versions not specified Description The application is susceptible to brute force, automated attacks, and account enumeration because it lacks a captcha implementation. A captcha is a security mechanism designed to...

PT-2026-60198

Name of the Vulnerable Software and Affected Versions Penpot versions prior to 2.14.5 Description An issue exists where invitation tokens from create-team-invitations in teams invitations.clj are exposed. Additionally, an existing profile id is embedded in prepare-register-profile within auth.clj...

PT-2026-58876

Name of the Vulnerable Software and Affected Versions ASUS GameSDK affected versions not specified Description A permissive Cross-domain Security Policy with untrusted domains allows a remote user to obtain a local user’s NTLM hash. This occurs when a user is convinced to visit a crafted web page...

PT-2026-60265

TDengine is an open source, time-series database optimized for Internet of Things devices. In 3.4.1.6 and earlier, source/libs/parser/src/parUtil.c trimString checks space for only one byte before processing SQL string escape sequences %, , or x, allowing a one-byte out-of-bounds write to the sta...

PT-2026-58154

Integer underflow wrap or wraparound in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network...

PT-2026-63408

Name of the Vulnerable Software and Affected Versions Check Point SmartConsole affected versions not specified Description An authentication bypass in the login process allows an unauthenticated remote attacker to obtain an application login token and authenticate with full administrative...

PT-2026-60021

Summary A Server Side Request Forgery SSRF vulnerability in download bytes from url allows any actor who can control batch input JSON to make the vLLM batch runner issue arbitrary HTTP/HTTPS requests from the server, without any URL validation or domain restrictions. This can be used to target...

PT-2026-59095

Relevant Products/Components: trestle/core/commands/author/jinja.py trestle author jinja --- Detailed Description: The -o/--output argument in trestle author jinja allows writing files outside the intended workspace. The application does not properly validate: ../ .. absolute paths This allows...

PT-2026-57425

Name of the Vulnerable Software and Affected Versions RSFiles versions prior to 1.17.12 Description The RSFiles Joomla extension contains a flaw allowing unauthenticated arbitrary file upload. This issue occurs via a split-controller upload bypass and a direct write task, enabling attackers to...

PT-2026-57365

Name of the Vulnerable Software and Affected Versions BabelDOC versions prior to 0.6.3 Description BabelDOC contains a flaw in its vendored PDF parser where the CMapDB. load data function deserializes untrusted pickle data when loading CMap files. An attacker can use hex-encoded absolute paths or...

PT-2026-56771

The Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteFiles function in all versions up to, and including, 3.1.1 This makes it possible for...

PT-2026-56355

Name of the Vulnerable Software and Affected Versions Foxit Editor/Reader affected versions not specified Description When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, which are repeated after the form is reset. The application fails ...

PT-2026-56196

Name of the Vulnerable Software and Affected Versions Django versions 6.0 through 6.0.6 Django versions 5.2 through 5.2.15 Description An issue exists where django.contrib.gis.gdal.GDALRaster over-reads its in-memory buffer when constructed from a bytes object. This can lead to the disclosure of...

PT-2026-55990

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Memory corruption occurs during the validation of input batch size and buffer plane count when these values exceed the maximum allowed limits. Recommendations At...

PT-2026-56004

Name of the Vulnerable Software and Affected Versions Crawl4AI versions prior to 0.9.0 Description The Docker API server fails to apply Server-Side Request Forgery SSRF destination checks on the streaming path. A remote unauthenticated client can exploit this by calling the 'POST /crawl/stream'...

PT-2026-55769

A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.1.0. This issue affects the function verify server of the file channel/wechatmp/common.py of the component wx Endpoint. This manipulation of the argument wechatmp token causes missing authentication. The attack may be initiat...

PT-2026-55727

A security vulnerability has been detected in code-projects Online Voting System up to 0.x/1.0. This issue affects the function test input of the file /authentication.php of the component Login. Such manipulation of the argument adminUserName/adminPassword leads to sql injection. It is possible t...

PT-2026-55500

Name of the Vulnerable Software and Affected Versions JSON API User versions prior to 4.1.1 Description The JSON API User plugin for WordPress contains a Stored Cross-Site Scripting issue. This occurs because the post comment function fails to properly sanitize input, allowing the comment content...

PT-2026-55531

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 Dell PowerProtect Data Domain versions 8.6.1.0 through 8.6.1.10 Dell PowerProtect Data Domain versions 8.3.1.0 through 8.3.1.30 Dell PowerProtect Data Domain versions 7.13.1.0 through...