PT-2026-116564

CVE-2026-5819 - Rejected reason: This CVE ID has been rejected or CVE ID :CVE-2026-5819 Published : Oct. 15, 2026, 11:17 p.m. | 1 hour, 34 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for mor...

PT-2026-115527

Name of the Vulnerable Software and Affected Versions User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin versions prior to 6.3.0 Description The premium build of the plugin contains a flaw due to insufficient input sanitization and output escaping. Thi...

PT-2026-115443

Name of the Vulnerable Software and Affected Versions ELEX WordPress HelpDesk & Customer Ticketing System versions prior to 3.3.8 Description Insufficient file type validation occurs when saving IMAP email attachments through the initMailPart function. This allows unauthenticated attackers to...

PT-2026-115434

The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

PT-2026-115454

Name of the Vulnerable Software and Affected Versions NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar versions prior to 3.3.4 Description Stored Cross-Site Scripting occurs due to insufficient input...

PT-2026-116563

CVE-2026-2937 - Rejected reason: This CVE ID has been rejected or CVE ID :CVE-2026-2937 Published : Oct. 15, 2026, 11:17 p.m. | 1 hour, 34 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for mor...

PT-2026-115516

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to invalidate the stored AD/LDAP bind password when other connection settings such as the server address are changed, which allows a System Console administrator to disclose the plaintext bind password ...

PT-2026-115377

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft...

PT-2026-116050

Risesoft Digital-Infrastructure through 9.6.11 contains a missing authorization vulnerability in the log module DownloadController that allows authenticated users to export any tenant's personnel directory. Attackers can supply another tenant's tenantId to exportLoginXLS or exportNotLoginXLS to...

PT-2026-115413

Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request...

PT-2026-116081

EFAK 5.0.0 through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to read LLM provider API keys through the /api/model-config REST API. Attackers with any ROLE USER account can query /api/model-config/page or /api/model-config/id to retrieve...

PT-2026-115637

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, the MMS file service in src/mms/iso mms/server/mms file service.c accepts an out-of-range initialPosition in fileOpen and stores it in the...

PT-2026-116139

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects without invoking the private-recipe owner or sharing permission when an authenticated member of a shared Space supplies...

PT-2026-115893

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.2.0 until 3.2.5, 3.3.4, 3.4.7, and 3.5.4, applications that enable permitSetMultiParamEntries can pass objects whose keys are expanded into a SQL SET clause without being processe...

PT-2026-116159

Frappe HR is an open-source human resources management solution HRMS. Prior to 15.58.3 and 16.4.3, HRMS PWA API endpoints for employee data do not consistently authorize employee-specific PWA API requests. An authenticated user requests records associated with another employee. The user can reque...

PT-2026-115655

Name of the Vulnerable Software and Affected Versions countly-server versions prior to 24.05.50 countly-server versions prior to 25.03.44 Description A flaw in the star-rating plugin allows a non-global application administrator to upload active content via the uploadFeedbackFile function in the...

PT-2026-115635

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux parse uuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memory contents...

PT-2026-115485

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.25.00 The vulnerability exists because the start comms dispatcher wps ic comms::start comms, hooked on every front-end request, gates acces...

PT-2026-116030

Distributor before 2.3.2 contains a missing authorization vulnerability that allows Contributor-level users to invoke external connection AJAX actions intended for manage options users. Attackers can call dt verify external connection with a chosen endpointId and url to send stored connection...

PT-2026-115453

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3 via the role parameter handled by the wppb add meta to user on activation function. The vulnerabili...

PT-2026-115405

The Flying Scripts: Delay JavaScript to Improve Site Speed & Performance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2026-116041

FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens impersonating the superuser. Attackers can register via the unauthenticated /api/v1/system/user/register endpoint, log in, and forge an HS256 token...

PT-2026-115410

Name of the Vulnerable Software and Affected Versions Wheels versions 1.1 through 4.1.2 Description The nestedProperties function resolves records by the posted primary key without verifying if they belong to the parent being saved. This allows a user submitting a nested form to update, reassign,...

PT-2026-115479

Name of the Vulnerable Software and Affected Versions Document Gallery WordPress plugin versions prior to 5.1.2 Description The plugin fails to perform capability or ownership checks when generating a gallery on demand. This allows unauthenticated users to enumerate and disclose titles,...

PT-2026-115587

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An unauthenticated remote attacker can exploit a weakness involving the allocation of resources without limits or throttling. This can result in high CPU load,...

PT-2026-115670

Name of the Vulnerable Software and Affected Versions MariaDB server versions 10.6.1 through 10.6.27 MariaDB server version 10.11.18 and earlier MariaDB server version 11.4.12 and earlier MariaDB server version 11.8.8 and earlier MariaDB server version 12.3.2 and earlier MariaDB server version...

PT-2026-116116

Arkon through 0.9.2 contains a missing authorization vulnerability in list skill versions that allows authenticated employees to read other departments' skill version metadata by bypassing the can access skill check. Attackers holding the default skill:read permission can request GET...

PT-2026-116113

🚨 CVE-2026-111714 tarteaucitron.js before 1.37.0 contains a regular expression denial of service vulnerability that allows attackers to block visitor pages by supplying unescaped cookie names to cookie.purge. Attackers can plant a cookie from a sibling subdomain or inject a purgeBtn element with ...

PT-2026-115528

Name of the Vulnerable Software and Affected Versions SureDash versions prior to 1.12.1 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Authenticated attackers with subscriber-level access or higher can inject arbitrary web scripts into...

PT-2026-116020

TDuck Survey Form through 5.3 contains a missing authorization vulnerability that allows any authenticated user to read other owners' raw form settings via GET /user/form/setting/key. Attackers can supply the 8-character form key from a public fill link to obtain the form write password, owner...

PT-2026-116174

Name of the Vulnerable Software and Affected Versions Sunshine versions 2026.329.165800 through 2026.906.222524 Description Sunshine accepts any client certificate that chains to a stored paired-client certificate without requiring the presented certificate to be the exact enabled paired identity...

PT-2026-115513

Name of the Vulnerable Software and Affected Versions Mattermost version 11.10.0 Mattermost versions 11.7.x through 11.7.9 Mattermost versions 11.9.x through 11.9.1 Mattermost versions 11.8.x through 11.8.5 Description The software fails to reject OAuth application sessions during an account type...

PT-2026-115901

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role and localhost user names that matched because both used an empty IP component. ...

PT-2026-115601

Name of the Vulnerable Software and Affected Versions Apache Kylin versions 4 through 5.0.4 Description A missing authorization and path-confinement issue exists in a backend metadata dump API. This flaw primarily impacts services directly exposed to the public network, while in-house deployments...

PT-2026-116048

🚨 CVE-2026-111649 Rocboss paopao-ce through 0.6.0-alpha.3 contains an insecure direct object reference vulnerability in DownloadAttachment that allows authenticated users to access private media by supplying arbitrary content IDs. Attackers can enumerate sequential post content ids via the...

PT-2026-116045

SurveyKing before 1.13.0 contains a missing authorization vulnerability that allows unauthenticated attackers to download any stored file by id through GET /api/public/preview/attachmentId. Attackers who know or derive time-ordered snowflake file ids can bypass shared, owner, and project checks i...

PT-2026-115483

Name of the Vulnerable Software and Affected Versions cifs-utils affected versions not specified Description A flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file...

PT-2026-120360

Уязвимость пакета утилит для монтирования сетевых файловых систем CIFS cifs-utils связана с внедрением или модификацией аргументов. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии и выполнить произвольный код...

PT-2026-115912

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a craft...

PT-2026-115385

FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent cache read entry v3 that allows local attackers to corrupt memory by supplying a crafted v3 persistent cache file. Attackers can set large width and height values that wrap the size calculation in persist cache get...

PT-2026-115486

Name of the Vulnerable Software and Affected Versions HUSKY – Products Filter for WooCommerce Professional versions prior to 1.4.6 Description An issue exists that allows unauthenticated attackers to extract sensitive database credentials, including the external MySQL host, database name, usernam...

PT-2026-115632

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser.IsSafeURL in parser/parser.go slices url:nPath before the lenurl = nPath guard. A short destination causes a slice-bounds panic when the...

PT-2026-116125

🚨 CVE-2025-55640 A heap buffer overflow in the stbl AddSize function isomedia/stbl write.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file. 🎖@cveNotify...

PT-2026-115424

The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.8.7. The public mcs GET parameter is reflected into post content unsanitized before WordPress core's do shortcode filter runs, allowing an unauthenticated...

PT-2026-115657

destructive command guard dcg is a command-line safety tool that blocks destructive shell commands before AI coding agents run them. Prior to 0.6.6, nested or unclosed substitutions are recursively rescanned after an inner scan returns unterminated, producing exponential-time work. The affected...

PT-2026-116190

Impact A path traversal vulnerability in the revision command allowed a crafted migration name supplied via the -m argument to escape the intended migrations directory. Under specific conditions, an attacker could cause the tool to create a .sql file in an arbitrary location writable by the user...

PT-2026-116073

🚨 CVE-2026-111674 Tbed through 20240319 contains a missing authorization vulnerability that allows any authenticated user to rename other users' images through the /admin/setImgFileName endpoint. Attackers can supply a victim's imgname, exposed in public image URLs and album listings, to overwrit...

PT-2026-116097

HUIZHI ChargeOS cloud through 3.0.9 contains a missing authorization vulnerability in the hcp-mp PayController.xcxRecharge endpoint that allows attackers to modify any member's wallet balance without payment. Attackers can send requests with arbitrary amount and userId parameters to credit or...

PT-2026-116076

Antiword through 0.37 contains a heap out-of-bounds read vulnerability in vGet8LstInfo in prop8.c caused by an inverted bounds check on the PlcfLst record count. Attackers can supply a crafted Word 8 .doc file claiming up to 0xffff LSTF records in a tiny buffer, causing reads past the heap...

PT-2026-116144

ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, downloadEvents manually wraps a monitor Name value in single quotes instead of using escapeshellarg before placing it in shell commands when a user with monitor-create or monitor-edit permission...