PT-2026-115139

Name of the Vulnerable Software and Affected Versions libfsapfs versions prior to 20260922 Description An integer underflow exists in the libfsapfs key encrypted key read data function. This allows attackers to trigger heap out-of-bounds reads by providing a crafted encrypted APFS image with...

PT-2026-115271

Name of the Vulnerable Software and Affected Versions snap7 versions prior to 1.4.4 Description An out-of-bounds write occurs in the opReadArea function of TSnap7MicroClient. This issue allows malicious S7 peers to overflow client buffers by manipulating an unchecked DataLength field. Rogue or...

PT-2026-115264

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.22.3 Description A heap-based out-of-bounds read exists in the parseNikonMakernote function. This occurs when the software processes a specially crafted Nikon NEF/TIFF image containing a 5-byte ShotInfo tag that...

PT-2026-115129

Name of the Vulnerable Software and Affected Versions FluidSynth versions prior to 2.6.2 Description An out-of-bounds write issue exists where attackers can corrupt heap and stack memory by providing unvalidated SoundFont modulator destination values. By crafting an SF2 file with PMOD/IMOD...

PT-2026-115164

Name of the Vulnerable Software and Affected Versions EarthScope libmseed versions prior to 3.5.5 Description A heap out-of-bounds read occurs in the ms3 detect function within parseutils.c when processing truncated miniSEED 2 record buffers. An attacker can trigger this by providing a 40 to 47...

PT-2026-115168

Name of the Vulnerable Software and Affected Versions WildMIDI versions 0.5.0 and earlier Description A heap out-of-bounds read exists in the HMP parser WM ParseNewHmp function. An attacker can provide a specially crafted .hmp file with a chunk length between 0 and 12, causing an underflow that...

PT-2026-122759

Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-122798

Security vulnerability affects the py3-pydantic-ai package. Pydantic AI is a Python agent framework for building applications and workflows with Generative AI...

PT-2026-115282

Name of the Vulnerable Software and Affected Versions rustdesk-api versions prior to 2.8 Description An authorization bypass allows unauthenticated attackers to overwrite existing peer records. By sending a target device ID to the 'POST /api/sysinfo' endpoint, attackers can modify the hostname,...

PT-2026-115090

Attackers converted grocery store refrigeration systems into heating units, reaching 50°C 120°F across 400+ European stores. They exploited Internet-exposed Danfoss controllers via CVE-2024-41450/41451/41452, then moved laterally through OT networks to coordinate simultaneous temperature...

PT-2026-122709

Security vulnerability affects the langfuse package. Next...

PT-2026-115133

Name of the Vulnerable Software and Affected Versions catdoc versions prior to 0.96 Description An out-of-bounds read occurs in the copy unicode string function within src/xlsparse.c due to an unchecked string character count. An attacker can use a specially crafted .xls file that declares 0xFFFF...

PT-2026-114782

Apply the DSA-2026-405 security update for Dell Wyse Management Suite to fix four XSS flaws, including critical bug CVE-2026-82158 CVSS 9.0. Dell WyseManagementSuite Cybersecurity Vulnerability XSS InfoSec https://t.co/PeIVNUn0pa...

PT-2026-115173

GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vulnerability in the AcDs decoder acds private that allows attackers to read beyond a static table via an unchecked schema property type index. Attackers can supply a crafted R2004 or R2010+ DWG file with a large 'schdat' propert...

PT-2026-115165

Name of the Vulnerable Software and Affected Versions libewf versions prior to 20260924 Description A heap out-of-bounds read occurs in the libewf lef extended attribute read data function because UTF-16 name and value sizes are validated before being doubled. An attacker can use a specially...

PT-2026-115170

UADE through 3.05 contains an out-of-bounds read vulnerability in uade filemagic in amifilemagic.c caused by unsigned bufsize subtraction wrapping on short inputs. Attackers can supply a crafted short module that passes format probe bounds checks and reads far past the buffer, crashing applicatio...

PT-2026-115175

La Suite Docs through 6.0.0 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access. Attackers who know a thread UUID can route a POST comment request through their own document's resource id, inserting comments...

PT-2026-115261

Name of the Vulnerable Software and Affected Versions libical versions prior to 4.0.7 Description A heap-based out-of-bounds read occurs in the icalvalue decode ical string function within src/libical/icalvalue.c when decoding input that ends with a backslash. An attacker can provide escaped...

PT-2026-114775

The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting via 'order email' in all versions up to, and including, 7.0.5 due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2026-115167

libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BW MidiSequencer that allows attackers to corrupt stack memory via crafted MIDI files. Attackers can supply a MIDI file with a note-on using status 0x9F and note 0x7F through adl openFile or adl...

PT-2026-115122

Insertion of Sensitive Information Into Sent Data vulnerability in ClikIT Infinite Uploads infinite-uploads allows Retrieve Embedded Sensitive Data.This issue affects Infinite Uploads: from n/a through 3.4.1...

PT-2026-115153

Name of the Vulnerable Software and Affected Versions Libyal libesedb versions prior to 20260704 Description A heap out-of-bounds read occurs in the libesedb record get multi value function. This issue allows attackers to read past buffers using unbounded multi-value offset tables. By providing a...

PT-2026-122874

Security vulnerability affects the renovate package. js-yaml is a JavaScript YAML parser and dumper...

PT-2026-122812

Security vulnerability affects the argo-cd package. go-git is an extensible git implementation library written in pure Go...

PT-2026-115071

Name of the Vulnerable Software and Affected Versions Nutanix Prism Element versions prior to 7.6.0.8 Nutanix Prism Element versions prior to 7.5.2 Nutanix Prism Element versions prior to 7.3.1.18 Nutanix Prism Central versions prior to 7.6.0.8 Nutanix Prism Central versions prior to 7.5.2 Nutani...

PT-2026-122791

Security vulnerability affects the strimzi-kafka-operator package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

PT-2026-114968

A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-of-bounds memory write, which may result in memory corruption...

PT-2026-114437

A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data...

PT-2026-114441

A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS...

PT-2026-114836

"ゲオアプリ" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow an attacker to obtain the password of a user of the affected application...

PT-2026-115078

XXL-JOB =3.5.0-SNAPSHOT contains a stored Cross-Site Scripting XSS vulnerability in the job log list page /joblog. An authenticated user who holds permission on a target executor job group can inject arbitrary JavaScript via the executorParam argument of the manual-trigger endpoint POST...

PT-2026-114898

A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash...

PT-2026-114937

In Progress® Kendo® UI for jQuery prior to 2026.3.1015, Model.accept passes server-response keys to kendo.setter without guarding against unsafe object paths containing proto , constructor, or prototype. An attacker who can supply data accepted by an affected model can modify object prototype...

PT-2026-115213

temporal-proxy 0.2.0 through 0.8.0 does not bind encrypted payloads to the namespace they were encrypted for. When payload encryption is enabled, the proxy chooses the decryption key by an identifier stored in the payload rather than by the namespace of the request, and nothing in the ciphertext...

PT-2026-114828

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the TDS message decoder in the Vert.x MSSQL client vertx-mssql-client aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or...

PT-2026-115289

Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private conversations by supplying another conversation's id. Attackers can request GET /api/v1/messages/conversation/:id, which lacks participant checks, to obtain full message histor...

PT-2026-114788

The Spin Wheel WordPress plugin before 2.2.1 does not verify that a visitor actually performed a legitimate spin before returning and consuming a configured prize coupon, allowing unauthenticated users to disclose and drain the stored coupon codes of any campaign, including unpublished ones...

PT-2026-114881

A cross-site scripting XSS vulnerability has been reported to affect Notes Station 3. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.12 and later...

PT-2026-115110

Missing Authorization vulnerability in WPExperts WP EasyPay wp-easy-pay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP EasyPay: from n/a through 4.5.4...

PT-2026-115003

🚨 CVE-2026-92982 A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource CR specification values. These values are processed by Ansible without proper sanitization, allowing embedded...

PT-2026-115327

Name of the Vulnerable Software and Affected Versions Docker affected versions not specified Description A failure in the Docker Buildx filesystem entitlements protection mechanism allows for remote code execution. Recommendations At the moment, there is no information about a newer version that...

PT-2026-115214

An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface. An authenticated administrator can inspect the client-side code to retrieve the credential...

PT-2026-114966

A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash...

PT-2026-114842

On request the sdbootutil script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it...

PT-2026-114811

Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence PoP server and intercept or modify tunnel traffic...

PT-2026-114820

Name of the Vulnerable Software and Affected Versions bhyve affected versions not specified Description The xHCI USB 3 device model fails to validate or save the event ring size provided by the guest. Because the size is re-read from guest memory during each use, Transfer Request Block TRB fields...

PT-2026-115294

Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links. Attackers who know a victim team's data room and group identifiers can send DELETE requests, read group...

PT-2026-122831

Security vulnerability affects the argo-cd package. go-git is an extensible git implementation library written in pure Go...

PT-2026-122806

Security vulnerability affects the langfuse package. Nodemailer versions 5...

PT-2026-115208

Name of the Vulnerable Software and Affected Versions Python Social Auth versions prior to 5.0.2 Description The LINE backend fails to validate the returned OAuth state during the exchange of an authorization code. This allows an attacker to initiate an authorization flow for an account they...