PT-2026-70151

Name of the Vulnerable Software and Affected Versions OpenShift Console affected versions not specified Description An authenticated Server-Side Request Forgery SSRF flaw exists in the OpenShift Console Dev Console webhook helpers. The system fetches user-supplied target URLs server-side without...

PT-2026-70152

A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace tenant can plant a ProjectHelmChartRepository with an arbitrary URL that the console pod fetches server-side, bypassing tenant egress restrictions. Combined with catalog metadata...

PT-2026-70305

Out-of-bounds read for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local...

PT-2026-70047

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter does not enforce cross-site request forgery CSRF protection on the authentication flow by default. CSRF is a type of attack that tricks a victim into submitting a maliciou...

PT-2026-70796

Name of the Vulnerable Software and Affected Versions ishankportfolio versions prior to 1.0.1 Description Contact form submissions may be exposed due to improperly secured client-side database configuration and insufficient access control policies. Applications using publicly exposed database...

PT-2026-70351

is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized read and write access, causing a limited disruption to availability. Exploitation of this...

PT-2026-70349

Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description ColdFusion uses a broken or risky cryptographic algorithm, which could allow an attacker to disclose sensitive memory and information. This issue can be exploited without any user...

PT-2026-70714

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70440

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A race condition occurs in Windows DNS due to improper synchronization when using a shared resource. This allows an authorized attacker to execute arbitrary code over a network, potential...

PT-2026-70528

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment...

PT-2026-70142

Name of the Vulnerable Software and Affected Versions Apioo Fusio version 8.8.3 Description An authenticated user with the consumer role can trigger server-side request forgery by registering a webhook URL that points to an internal host. The webhook registration endpoint validates URL syntax usi...

PT-2026-70478

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows DHCP Server, which may allow an unauthorized attacker to disclose sensitive information over an adjacent network and...

PT-2026-70728

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An untrusted pointer dereference allows an unauthorized attacker to execute arbitrary code locally and remotely, potentially affecting the entire system. A pointer dereference...

PT-2026-70120

An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to write to any contact record via the updatecontacttour Parse cloud function. The function performs no authentication or authorization before updating the target...

PT-2026-70672

Name of the Vulnerable Software and Affected Versions Windows Active Directory affected versions not specified Description Inadequate encryption strength allows an authorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the...

PT-2026-70418

Name of the Vulnerable Software and Affected Versions Microsoft Remote Registry Service affected versions not specified Description A null pointer dereference in the Microsoft Remote Registry Service allows an authorized attacker to cause a denial of service over a network. A null pointer...

PT-2026-70562

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description A heap-based buffer overflow occurs in the Windows DHCP Server, which allows an unauthorized attacker located on an adjacent network to execute arbitrary code and affect the syste...

PT-2026-70398

Name of the Vulnerable Software and Affected Versions Microsoft .NET affected versions not specified Description An integer overflow or wraparound occurs in the .NET platform, which could allow an unauthorized attacker to elevate privileges locally. Integer overflow is a condition where an...

PT-2026-70229

Name of the Vulnerable Software and Affected Versions NETGEAR affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory. This issue...

PT-2026-70541

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A heap-based buffer overflow occurs in the Windows SMB Server, which allows an authorized attacker to execute arbitrary code over a network and affect the system. A heap-based buff...

PT-2026-70313

Improper privilege management for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable escalation of privilege...

PT-2026-70324

Heap-based buffer overflow for the IntelR Open Volume Kernel Library IntelR Open VKL library maintained by intelR before version 2.0.2 within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may...

PT-2026-70326

Improper buffer restrictions for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially...

PT-2026-70336

Name of the Vulnerable Software and Affected Versions IntelR Workload Services Framework affected versions not specified Description A protection mechanism failure within Ring 3 the least privileged level of the CPU architecture where user applications run may allow an unprivileged software...

PT-2026-70031

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter fails to sufficiently validate tenant context in inbound requests. This allows an unauthenticated attacker to send specially crafted requests to spoof the tenant context,...

PT-2026-70492

Name of the Vulnerable Software and Affected Versions Windows Wired AutoConfig Service affected versions not specified Description A buffer over-read in the Windows Wired AutoConfig Service allows an authorized attacker to disclose sensitive information locally, which can affect the system...

PT-2026-70171

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the VM expression engine. An authenticated user able to create or edit a workflow expression can abuse the engine's array-element access to obtain a reference to a host built-in and pollute its prototype in th...

PT-2026-70291

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software affected versions not specified Description Improper conditions check within Ring 2 device drivers may allow a network adversary to cause a denial of service. This issue can be triggered by an unauthenticat...

PT-2026-70835

The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 10.11.1. This is due to the plugin not properly verifying that a user is authorized to perform an action...

PT-2026-70145

Name of the Vulnerable Software and Affected Versions CSZ CMS version 1.3.2 Description Broken access control allows unauthenticated remote attackers to read all form submissions, including personally identifiable information, through the admin form-submission viewer. This occurs because the view...

PT-2026-70169

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution vulnerability in the Git node. Authenticated users with rights to create and execute workflows can stage a crafted local repository that causes git to run hooks under default git security settings,...

PT-2026-70590

Name of the Vulnerable Software and Affected Versions Microsoft QUIC affected versions not specified Description A use after free issue exists in Microsoft QUIC. This occurs when a program continues to use a pointer after it has been freed, which can be leveraged by an unauthorized attacker to...

PT-2026-70581

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An integer overflow or wraparound occurs in .NET, which could allow an unauthorized attacker to elevate privileges locally. An integer overflow happens when an arithmetic operation attempts to...

PT-2026-70905

Multiple Cross-Site Scripting XSS vulnerabilities were identified in GMS 9.5.1 Build 9510.1044 and earlier versions that allow a remote attacker to execute javascript script in a user's browser...

PT-2026-70158

FreeRDP before 3.30.0 contains an out-of-bounds vulnerability in kerberos DecryptMessage winpr/libwinpr/sspi/Kerberos/kerberos.c. The 16-bit EC extra count field of a peer-supplied GSS Wrap token RFC 4121 is used directly in pointer arithmetic to locate the encrypted regions without being...

PT-2026-70302

Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via...

PT-2026-76427

These are all security issues fixed in the libudisks2-0-2.11.2-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-70731

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

PT-2026-70273

Name of the Vulnerable Software and Affected Versions IntelR XeonR 6 Scalable processors with IntelR TDX affected versions not specified Description Insufficient granularity of access control in a subsystem may allow an information disclosure. An authorized adversary with an authenticated user ca...

PT-2026-70802

Exposure of sensitive information caused by incorrect data forwarding during transient execution for some IntelR Processors within Ring 0: Hypervisor and Kernel may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable dat...

PT-2026-70295

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description Improper handling of overlap between protected memory ranges in some microcode within Ring 0: Hypervisor may allow an escalation of privilege. An authorized adversary with privilege...

PT-2026-70792

Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack...

PT-2026-70038

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter fails to correctly validate client certificates during specific callback flows. An attacker with low privileges who possesses a certificate issued by the same trusted...

PT-2026-70375

CAI Content Credentials is affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...

PT-2026-70519

Name of the Vulnerable Software and Affected Versions Windows Kerberos affected versions not specified Description A double free issue in Windows Kerberos allows an authorized attacker to elevate privileges locally. A double free occurs when the system attempts to free the same memory location...

PT-2026-70075

Name of the Vulnerable Software and Affected Versions Samsung Open Source rlottie affected versions not specified Description An issue exists where improper validation of the specified quantity in the input and the allocation of resources without limits or throttling allows for excessive...

PT-2026-70465

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A heap-based buffer overflow occurs in Windows NTFS, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that...

PT-2026-70768

Name of the Vulnerable Software and Affected Versions GitHub Copilot affected versions not specified Visual Studio Code affected versions not specified Description Improper neutralization of special elements used in an OS command, known as OS command injection, allows an unauthorized attacker to...

PT-2026-70984

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

PT-2026-70985

OriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User interaction is required to exploit this vulnerability in that the target must...