PT-2026-70657

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Deserialization is the process of...

PT-2026-70555

Name of the Vulnerable Software and Affected Versions Microsoft QUIC affected versions not specified Description A use after free issue in Microsoft QUIC allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use after free is a memory corruption fl...

PT-2026-70409

Name of the Vulnerable Software and Affected Versions AMD Zen affected versions not specified Description An issue in AMD Zen allows an authorized attacker to locally disclose sensitive information, which can affect the system. Recommendations At the moment, there is no information about a newer...

PT-2026-76024

VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf in github.com/canonical/lxd...

PT-2026-70227

Name of the Vulnerable Software and Affected Versions NETGEAR affected versions not specified Description A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is designed to hold, potentially overwriting adjacent memory. In this case, the issue allows ...

PT-2026-70088

Name of the Vulnerable Software and Affected Versions Undertow affected versions not specified Description The Undertow AJP listener accepts forged ssl cert and is ssl AJP attributes without requiring shared-secret authentication. This allows an unauthenticated attacker with direct TCP access to...

PT-2026-70284

Name of the Vulnerable Software and Affected Versions Intel Extension for TensorFlow versions prior to 2.15.0.3 Description A protection mechanism failure within Ring 3 User Applications may allow a local adversary with privileged user access to escalate privileges. This issue requires passive us...

PT-2026-70231

Name of the Vulnerable Software and Affected Versions NETGEAR affected versions not specified Description Insufficient input validation allows authenticated administrators connected to the local network to make unauthorized modifications to router software and functionality. Recommendations At th...

PT-2026-70911

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated GET /addTask endpoint in kkFileView is omitted from TrustHostFilter and TrustDirFilter in server/src/main/java/cn/keking/config/WebConfig.java, allowing FileConvertQueueTask to fetch an...

PT-2026-70238

ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.207, the ToolJet Database HTTP API in server/src/modules/tooljet-db/controller.ts authorizes operations against the :organizationId URL path value without...

PT-2026-70448

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use-after-free condition in the Windows Kernel allows an authorized attacker to elevate privileges locally, enabling them to affect the system. Use-after-free is a memory corruption...

PT-2026-70644

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An out-of-bounds read exists in Microsoft Office Word, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds re...

PT-2026-70653

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized attacker...

PT-2026-70164

n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary file write vulnerability in the Edit Image node, which passes its output format parameter to the underlying image library without validation. An authenticated user able to run workflows can supply a crafted format value to writ...

PT-2026-70340

Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version 45cd723 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of...

PT-2026-70232

Name of the Vulnerable Software and Affected Versions NETGEAR Nighthawk affected versions not specified Description A command injection flaw allows a network-adjacent attacker who can intercept and modify local network traffic attacker-in-the-middle to compromise the confidentiality and integrity...

PT-2026-70750

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

PT-2026-70942

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme s6a subscription data from avp of the file src/mme/mme-fd-path.c of the component Diameter S6a Interface. Executing a manipulation of the argument msisdn len can lead to heap-based buffer overflow. ...

PT-2026-70162

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the Edit Fields Set node. The node assigns output fields via a dot-notation path setter without restricting the field name, allowing an authenticated user to name a field after an inherited built-in method pat...

PT-2026-70020

Name of the Vulnerable Software and Affected Versions SAP SAPSPrint Service affected versions not specified Description Memory corruption exists in the handling of certain commands. An unauthenticated attacker can send specially crafted requests to trigger a buffer overflow, which leads to a...

PT-2026-70129

Name of the Vulnerable Software and Affected Versions Ladybird Web Solution Faveo Helpdesk version 2.0.3 Description A broken access control issue exists in the v1 REST API. The API verifies if a requested ticket exists but fails to verify if the authenticated user owns that ticket. This allows a...

PT-2026-70696

Improper input validation in Power BI allows an authorized attacker to execute code over a network...

PT-2026-70070

Name of the Vulnerable Software and Affected Versions Axis Communications ACAP affected versions not specified Description An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This issue is exploitable only if the device is configured to allow t...

PT-2026-70200

Craft CMS versions = 5.0.0-RC1 before 5.10.6 and = 4.0.0-RC1 before 4.18.2 interpolate environment variables and secrets via $ENV VAR strings in the elementId parameter into Twig templates before rendering, even when the Twig sandbox is enabled. An authenticated attacker with control panel access...

PT-2026-70513

Name of the Vulnerable Software and Affected Versions Windows HTTP.sys affected versions not specified Description A heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...

PT-2026-70321

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An Improper Input Validation issue allows a low-privileged attacker to achieve privilege escalation, granting unauthorized read and write access. This...

PT-2026-70515

Name of the Vulnerable Software and Affected Versions Windows DHCP Client affected versions not specified Description A stack-based buffer overflow occurs in the Windows DHCP Client, which allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow is a condition...

PT-2026-70536

Name of the Vulnerable Software and Affected Versions Microsoft Local Security Authority Server lsasrv affected versions not specified Description A heap-based buffer overflow occurs in the Microsoft Local Security Authority Server lsasrv, which is a process responsible for managing local securit...

PT-2026-70344

Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description An OS Command Injection issue exists due to improper neutralization of special elements used in an OS command. This allows an attacker to execute arbitrary code in the context of the curre...

PT-2026-70939

calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled composite template metadata from a malicious EPUB, OPF, PDF, or similar file through program: and a nested template call whose formatter does not inherit allow python templates=False, allowing a nested python:...

PT-2026-70892

Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns another...

PT-2026-70799

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.1, good peer addr in src/server/ns turn server.c uses ioa addr in range in src/client/ns turn ioaddr.c without canonicalizing IPv4-compatible, 6to4, and 64:ff9b::/96 NAT64 address forms, allowing an authenticated R...

PT-2026-70040

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform affected versions not specified Description SAP BusinessObjects Business Intelligence Platform stores sensitive credentials associated with user objects using a hard-coded cryptographic key. A...

PT-2026-70895

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, PropertyFileIncluded::Restore in src/App/PropertyFile.cpp concatenates an attacker-controlled file or data attribute from Document.xml with the document transient path without rejecting directory components,...

PT-2026-70800

Weaver Fanwei E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers to read arbitrary files by injecting a UNION SELECT payload into the markId GET parameter, which is concatenated unsanitized into a SQL query. Attackers...

PT-2026-70600

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs when a...

PT-2026-70420

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description A buffer over-read in the Windows Event Logging Service allows an authorized attacker to disclose information locally. A buffer over-read occurs when a program reads mor...

PT-2026-70771

Name of the Vulnerable Software and Affected Versions Microsoft PowerShell affected versions not specified Description Improper control of code generation in Microsoft PowerShell enables an unauthorized attacker to locally bypass a security feature through code injection, which is the process of...

PT-2026-71891

CVE-2023-54367 - Rejected reason: This CVE ID has been rejected. CVE ID :CVE-2023-54367 Published : Aug. 11, 2026, 3:17 p.m. | 14 minutes ago Description :Rejected reason: This CVE ID has been rejected. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products,...

PT-2026-70177

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the PostgresTrigger node, which interpolates user-supplied identifier parameters channel, function, and trigger names into SQL statements without proper escaping. An authenticated user can inject arbitrary SQL...

PT-2026-70079

Name of the Vulnerable Software and Affected Versions cti-transmute affected versions not specified Description The software fails to apply comment-level access-control rules during the generation of evaluation report exports. While standard comment retrieval correctly filters based on conversion...

PT-2026-70030

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter fails to properly handle certain requests under specific conditions. An unauthenticated attacker can send specially crafted input that causes the component to crash and...

PT-2026-70484

Name of the Vulnerable Software and Affected Versions User-Mode Power Service UMPS affected versions not specified Description Insufficient granularity of access control in the User-Mode Power Service UMPS allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

PT-2026-70677

Name of the Vulnerable Software and Affected Versions Windows Autopilot affected versions not specified Description A use-after-free condition in Windows Autopilot allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...

PT-2026-70665

Name of the Vulnerable Software and Affected Versions Microsoft Teams for Android affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting XSS, a technique where malicious scripts are injected into trusted websites. This...

PT-2026-70228

Name of the Vulnerable Software and Affected Versions NETGEAR affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory. This issue...

PT-2026-70641

Name of the Vulnerable Software and Affected Versions Microsoft Office Access affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70925

The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without independently attesting the version from the device itself. An authenticated attacker could submit arbitrary firmware version strings for their own device, allowing them to...

PT-2026-70074

Name of the Vulnerable Software and Affected Versions insights-core affected versions not specified Description A flaw in the password redaction layer fails to recognize credentials that are not keyed under the literal string 'password'. This issue allows SSSD LDAP bind passwords, specifically th...

PT-2026-70242

A flaw was found in the oauth-server component. This open redirect vulnerability occurs when the 'then' parameter in the grant approval handler is not properly validated. A remote attacker can craft a malicious URL that, when approved or denied by an authenticated user, redirects them to an...