PT-2023-32260 · Beijing Baichuo +1 · Beijing Baichuo Smart S85F Management Platform +1

Name of the Vulnerable Software and Affected Versions: Byzoro Smart S85F Management Platform versions up to 20231012 Beijing Baichuo Smart S85F Management Platform versions up to 20231012 Description: A critical issue has been found, affecting an unknown functionality of the file /importexport.ph...

PT-2023-9638 · Totolink · Totolink Lr350

Name of the Vulnerable Software and Affected Versions: TOTOLINK LR350 versions up to 9.3.5u.6369 Description: A critical issue is related to the authorization procedure, specifically with the handling of the authCode parameter. This can allow a remote attacker to bypass security restrictions. The...

PT-2023-25563 · WordPress · Jeffrey-Wp Media Library Categories

Name of the Vulnerable Software and Affected Versions: Jeffrey-WP Media Library Categories plugin versions = 2.0.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Jeffrey-WP Media Library Categories plugin. This vulnerability requires...

PT-2023-25413 · WordPress · Simple Author Box

Name of the Vulnerable Software and Affected Versions: The Simple Author Box WordPress plugin versions prior to 2.52 Description: The issue is related to the disclosure of arbitrary user information due to a lack of verification of the user ID before outputting information about that user. This c...

PT-2023-21413 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD version 2023 Description: A maliciously crafted X B file can cause an Integer Overflow when parsed through the software. This can be leveraged by a malicious actor to cause a crash, read sensitive data, or execute arbitrary...

PT-2023-4614 · Softing · Softing Edgeconnector Siemens

Name of the Vulnerable Software and Affected Versions: Softing edgeConnector Siemens affected versions not specified Description: The issue is related to a null pointer dereference error in the handling of OPC client certificates, which can be exploited by remote attackers to create a...

PT-2023-14594 · Group Arge Energy Control Systems · Smartpower Web

Name of the Vulnerable Software and Affected Versions: Smartpower Web versions prior to 23.01.01 Description: The issue affects Group Arge Energy and Control Systems Smartpower Web, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation...

PT-2022-17995 · Tyler · Tyler Odyssey Portal

Name of the Vulnerable Software and Affected Versions: Tyler Odyssey Portal platform versions prior to 17.1.20 Description: An Insecure Direct Object Reference issue exists in the Tyler Odyssey Portal platform. This may allow an external party to access sensitive case records. Recommendations: Fo...

PT-2022-12288 · Plesk · Plesk Cms

Name of the Vulnerable Software and Affected Versions: Plesk CMS version 18.0.37 Description: The issue is related to an insecure permissions vulnerability that allows privilege escalation from user to admin rights. According to the vendor, this is a site-specific problem affecting websites of on...

PT-2021-8035 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the cfg80211 function in the Linux kernel, where switching from P2P GO type to ADHOC type via send msgNL80211 CMD SET INTERFACE does not call the cleanup functi...

PT-2021-7751 · Linux +9 · Linux +9

Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified Description: A flaw was found in the Linux SCTP stack, allowing a blind attacker to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being...

PT-2021-1815 · Cisco · Cisco Smart Software Manager Satellite +1

Name of the Vulnerable Software and Affected Versions: Cisco Smart Software Manager Satellite affected versions not specified Cisco Smart Software Manager On-Prem affected versions not specified Description: The issue is related to multiple vulnerabilities in the web UI of Cisco Smart Software...

PT-2020-6661 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to the use of memory after it has been freed in the llcp sock bind function of the NFC protocol in the Linux kernel. This could allow a local attacker to access...

PT-2026-91899

Incorrect Permission Assignment for Critical Resource in the configuration loader of Duplicati for Windows versions before v2.4.0.0 allows a local low-privileged attacker to escalate privileges to NT AUTHORITYSYSTEM via an attacker-controlled preload.json file...

PT-2026-89045

News: Schneider Electric, Siemens, and Aveva ship ICS Patch Tuesday. Worst new hit: Modicon M580 auth CVE-2026-3869 CVSS 9.2. Siemens flags critical Reyrolle 7SR5, OIS, Industrial Edge bugs. OT owners: patch controllers now. https://t.co/TT7I5NW8Ee...

PT-2026-84390

Execution with Unnecessary Privileges CWE-250 in the Kibana machine learning feature can lead to information disclosure via Privilege Abuse CAPEC-122. An operation available to users holding only read access to the machine learning feature was performed with an internal service identity rather th...

PT-2026-83941

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 0.12.13, MCPB File Upload Handler extracts a ZIP file and reads manifest.json from it. The name field in the manifest i...

PT-2026-79606

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Use current context for safe per-CPU buffer swap The ring buffer swap cpu function currently checks the per-CPU committing counter to determine if a buffer is actively being written to before performing the swap...

PT-2026-79187

Name of the Vulnerable Software and Affected Versions TREK versions prior to 3.1.0 Description TREK fails to revalidate URLs during native redirect following in the importGoogleList and importNaverList functions within server/src/services/placeService.ts, and the resolveGoogleMapsUrl function...

PT-2026-79259

Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters int...

PT-2026-76927

Grav before 2.0.15 contains an arbitrary file write vulnerability in the Blueprint dynamic-data bare-function validation that uses an incomplete denylist instead of a positive allowlist. Attackers with page-edit or blueprint-config access can invoke the error log function through a data directive...

PT-2026-76847

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or corrupt kernel memory...

PT-2026-73097

The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

PT-2026-72782

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix OOB read during CQ MR registration Sashiko pointed out an unrelated bug during a previous patch: https://sashiko.dev//patchset/20260512183852.614045-1-jmoroni%40google.com This change fixes the bug by eliminating...

PT-2026-72345

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Fix frags overflow by bounding frame count tbnet poll assembles a multi-frame ThunderboltIP packet into one skb. The first frame goes into the skb linear area and every further frame is added as a page fragment...

PT-2026-71025

The WooCommerce Subscriptions WordPress plugin before 9.1.0 does not validate user input before unserializing it on stores with High-Performance Order Storage enabled, leading to a PHP Object Injection issue which unauthenticated users can escalate to Remote Code Execution via a gadget chain...

PT-2026-70992

Name of the Vulnerable Software and Affected Versions Wazuh Manager affected versions not specified Description A deserialization of untrusted data issue exists in the Cluster DAPI Protocol, which allows a remote attacker to execute arbitrary code and perform arbitrary file read and write...

PT-2026-69427

Name of the Vulnerable Software and Affected Versions Apache Ranger versions prior to 2.9.0 Description An issue exists that allows for SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database...

PT-2026-67404

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.3 Description An information disclosure issue exists where the endpoints 'getHeadingDeleteTransaction', 'getHeadingLevelTransaction', and 'getHeadingInsertTransaction' return rendered block DOM without performing...

PT-2026-66458

Name of the Vulnerable Software and Affected Versions PHP versions 8.4.0 through 8.4.23 PHP versions 8.5.0 through 8.5.8 Description Attacker-provided inputs to the bccomp function can lead to an out-of-bounds write, resulting in stack and heap corruption. An out-of-bounds write occurs when a...

PT-2026-65767

The FAB auth manager's Azure AD OAuth login defaulted verify signature=False when decoding the ID token, so an attacker able to present a forged or unsigned alg:none ID token to the OAuth callback could bypass authentication and log in as an arbitrary user, including one holding the Admin role...

PT-2026-65676

The Wholesale for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.5. This is due to the save requests meta function applying only sanitize text field to the user role set POST parameter before passing it directly to WP User::add rol...

PT-2026-65496

Name of the Vulnerable Software and Affected Versions Apache Axis2/Java versions prior to 2.0.1 Description An issue exists in the Tribes-based clustering component when running on Apache Tomcat. When Tribes clustering is enabled, an unauthenticated remote attacker with network access to the...

PT-2026-65414

A low privileged remote attacker can perform privileged configuration changes reserved for the administrator level including permission management due to incorrect authorization...

PT-2026-65102

Name of the Vulnerable Software and Affected Versions JFrog Artifactory Self Hosted versions prior to 7.133.11 Description An incorrect authorization validation of the user token allows for privilege escalation. The issue occurs because the system performs a validation check on the token signatur...

PT-2026-64607

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the SMB client. A response-bearing attempt can return a replayable error and free its response buffer. If the SMB2 query info init function fails before the...

PT-2026-64489

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA siw driver where the siw proc rresp function fails to check the running total of inbound Read Response DDP segments against the sink buffer length on...

PT-2026-64421

Name of the Vulnerable Software and Affected Versions GPU DDK affected versions not specified Description An integer overflow occurs during the calculation of physical offsets for sparse PMRs Partial Memory Regions within the PMRLogicalOffsetToPhysicalOffset function. For PMRs larger than 4 GB,...

PT-2026-64410

Name of the Vulnerable Software and Affected Versions Milkdown versions prior to 7.21.3 Description A DOM cross-site scripting issue exists in the @milkdown/plugin-emoji package. Unauthenticated attackers can execute arbitrary JavaScript in the host application origin by tricking a victim into...

PT-2026-64187

Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Open Policy Agent OPA deny-on-presence Rego policies. When a request body exceeds the configured maxBodyBytes limit, Skipper forwards the full payload to the upstream service while OPA evaluates against...

PT-2026-61940

Name of the Vulnerable Software and Affected Versions libssh affected versions not specified Description A flaw exists where a malicious SFTP server can send responses for unknown request IDs. The libssh client queues these responses indefinitely, leading to unbounded memory growth and a...

PT-2026-62727

Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite component: Site Hierarchy Flows. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Site Hub. Successful...

PT-2026-61547

In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control over %ProgramData% instead of being restricted to %ProgramData%BizerbaBRAIN2. Starting with BRAIN2 3.09, the setup no longer executes this...

PT-2026-60922

A vulnerability was found in AstrBotDevs AstrBot up to 4.25.5. Impacted is the function normalize rw path of the file astrbot/core/tools/computer tools/fs.py of the component Filesystem Computer-Use Tool. Performing a manipulation results in link following. The attack is only possible with local...

PT-2026-60698

Name of the Vulnerable Software and Affected Versions Pheditor versions 2.0.1 through 2.0.5 Description Pheditor contains a hardcoded default password admin stored as a SHA-512 hash in the pheditor.php file. The application lacks a mechanism to force a password change upon the first login. An...

PT-2026-58881

The Shibboleth WordPress plugin before 2.5.4 does not fail closed when its HTTP header identity mode is enabled without an anti-spoofing key, treating any request that carries identity headers as an authenticated session without verifying them. On a deployment where untrusted client headers reach...

PT-2026-60237

Cherry Studio versions 1.2.2 through 1.9.12, fixed in commit 1518530, contain a remote code execution vulnerability in SearchService that allows remote attackers to execute arbitrary code by delivering malicious JavaScript through controlled search provider content loaded into an Electron...

PT-2026-58798

Name of the Vulnerable Software and Affected Versions Adobe Commerce affected versions not specified Description An improper encoding or escaping of output issue allows for arbitrary code execution in the context of the current user. This flaw can be exploited without requiring any user...

PT-2026-57985

Name of the Vulnerable Software and Affected Versions Eclipse KUKSA Databroker version 0.6.1 Description The kuksa.val.v2.VAL/PublishValue gRPC handler fails to validate the existence of the optional data point field in PublishValueRequest. If a request includes a valid signal id but omits data...

PT-2026-58285

Name of the Vulnerable Software and Affected Versions Power BI Report Server versions prior to 15.0.1121.120 Description Improper neutralization of input during web page generation leads to cross-site scripting XSS, a technique where malicious scripts are injected into trusted websites. This allo...