PT-2026-69646

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/gfx11 component where the use of the BUG ON function can cause the kernel to crash unnecessarily in certain cases. The fix involves replacing BUG ON wit...

PT-2026-69650

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/sdma5.2 component where the use of the BUG ON function can cause the kernel to crash unnecessarily in certain cases. The BUG ON function is a kernel...

PT-2026-69652

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/sdma7.0 component where the use of the BUG ON function can cause the kernel to crash unnecessarily in certain cases. The BUG ON function is a kernel...

PT-2026-69481

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the PSD file format plugin where an unsigned integer underflow occurs in the block rem variable when opening a specially crafted .psd image file. This underflow causes parser...

PT-2026-69856

Name of the Vulnerable Software and Affected Versions Chatwoot versions prior to 4.9.0 Description Authenticated account administrators can transfer Portals, Automation Rules, Macros, and Twilio Channels to other accounts by manipulating the writable account id parameter. This flaw breaks tenant...

PT-2026-69585

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the LoongArch architecture where the jump label init function is called after parse early param. When CONFIG MEM ALLOC PROFILING=y and CONFIG MEM ALLOC PROFILING ENABL...

PT-2026-69424

Name of the Vulnerable Software and Affected Versions Apache IoTDB versions prior to 1.3.8 Apache IoTDB versions 2.0.0 through 2.0.8 Description Improper validation of length fields in the RPC service allows a remote unauthenticated attacker to cause a denial of service. By sending a crafted...

PT-2026-69980

Name of the Vulnerable Software and Affected Versions CyberChef versions prior to 11.3.0 Description The pretty-recipe parser in src/core/Utils.mjs can cause client-side CPU exhaustion when processing a malformed recipe= URL fragment containing numerous unmatched quote characters. This occurs whe...

PT-2026-69981

Name of the Vulnerable Software and Affected Versions Kitty versions prior to 0.48.2 Description In the kitty/window.py file, the @kitty-echo and @kitty-ssh DCS handlers write unauthenticated data to the child shell's stdin. The handle remote echo function accepts printable shell command...

PT-2026-69931

Name of the Vulnerable Software and Affected Versions Typemill CMS versions 2.x Description A persistent cross-site scripting issue exists in the Markdown parser extension. Authenticated users with theme-configuration access can inject malicious JavaScript URIs by providing unsanitized href value...

PT-2026-69427

Name of the Vulnerable Software and Affected Versions Apache Ranger versions prior to 2.9.0 Description An issue exists that allows for SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database...

PT-2026-69993

Name of the Vulnerable Software and Affected Versions TP-Link Aginet affected versions not specified Description Certain devices use hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data. An attacker with access to the device storage can recover these keys ...

PT-2026-69872

Name of the Vulnerable Software and Affected Versions multicluster-global-hub affected versions not specified Description The manager component fails to properly validate the source identity of incoming CloudEvents on Kafka status topics. A remote attacker who has compromised a managed hub and...

PT-2026-69918

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description An issue exists where the endpoint application.one in apps/dokploy/server/api/routers/application.ts returns provider relations loaded by the findApplicationById function in...

PT-2026-69869

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.1.6 Discourse versions prior to 2026.5.2 Discourse versions prior to 2026.6.1 Discourse versions prior to 2026.7.0 Description The discourse-local-dates plugin renders crafted local-date format data as HTML. Th...

PT-2026-69369

Name of the Vulnerable Software and Affected Versions FoodBoxBooker versions prior to 1.0.8 Description An issue exists where the plugin fails to verify if the user account being updated belongs to the user initiating the request. This allows authenticated users with Subscriber-level access or...

PT-2026-69534

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ptp s390 component of the Precision Time Protocol PTP implementation. The system fails to perform a necessary facility check, which should ensure that the physical...

PT-2026-69425

Name of the Vulnerable Software and Affected Versions Fabrik versions prior to 4.6.9 Description An unauthenticated attacker can execute arbitrary code by leveraging the ajax calc feature within the calc plugin. Recommendations Update to version 4.6.9 or later. As a temporary workaround, restrict...

PT-2026-69344

Name of the Vulnerable Software and Affected Versions Autopay WordPress plugin versions prior to 5.0.1 Description An issue exists where the software fails to perform capability or nonce checks before saving a styling option from a public request. Additionally, the saved value is not escaped when...

PT-2026-69987

Name of the Vulnerable Software and Affected Versions Rocket.Chat versions prior to 7.10.14 Rocket.Chat versions prior to 8.0.8 Rocket.Chat versions prior to 8.1.7 Rocket.Chat versions prior to 8.2.7 Rocket.Chat versions prior to 8.3.7 Rocket.Chat versions prior to 8.4.5 Rocket.Chat versions prio...

PT-2026-69986

Name of the Vulnerable Software and Affected Versions AnythingLLM versions 1.0.0 through 1.15.0 Description The unauthenticated account-recovery flow in the server/utils/PasswordRecovery/index.js file uses the recoverAccount function to deduplicate recoveryCodes values before they are trimmed. Th...

PT-2026-69978

Name of the Vulnerable Software and Affected Versions ERPNext versions prior to 15.112.0 ERPNext versions prior to 16.22.0 Description Authenticated users with limited privileges can modify protected data beyond their assigned roles because certain functions omit required write permission checks...

PT-2026-69976

Name of the Vulnerable Software and Affected Versions ERPNext versions prior to 15.109.0 ERPNext versions prior to 16.20.0 Description An authenticated low-privilege user can perform SQL injection to extract sensitive information. This occurs because the get tax template function in...

PT-2026-69885

Name of the Vulnerable Software and Affected Versions use-reducer-async affected versions not specified Description Malicious commits were introduced into the default branch of the repository, which executed remote attacker-controlled code on developer workstations during the npm install process...

PT-2026-69540

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the af iucv component. The system queues not-yet-received message notifications on iucv-message q, which hold raw pointers to the connection's iucv path...

PT-2026-69868

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.1.7 Description An authenticated user can submit specially formed URLs to bypass the Onebox allowlist, which allows the embedding of malicious content within a site. Onebox is a feature that expands URLs into...

PT-2026-69328

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Doctors Appointment System version 1.0 Description A SQL injection flaw exists that allows remote attackers to manipulate the ID argument. This issue occurs within an unknown function in the '/admin/ajax.php?action=set...

PT-2026-69480

Name of the Vulnerable Software and Affected Versions Jenkins Project Jenkins versions prior to LTS 2.555.3 Description An incomplete patch allows an authenticated remote attacker with Item/Configure permission to read arbitrary files on the Jenkins controller filesystem. The issue exists because...

PT-2026-69882

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.9 Description An issue exists where the application fails to verify if the destination.organizationId matches the ctx.session.activeOrganizationId when processing requests. This allows an authenticated member wit...

PT-2026-69528

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.1.0-rc1 Description An issue exists in the ice parser profile init function where the system fails to validate the ptype value provided through VIRTCHNL. Because the set bit operation uses a bitmap with a maximum size of...

PT-2026-69936

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.28.9 Description Dokploy is a free, self-hostable Platform as a Service PaaS. An authenticated user with permissions to create or update file mounts for a service can inject shell metacharacters into the filePath...

PT-2026-69925

Name of the Vulnerable Software and Affected Versions TBEA TLogger version 2.1.0.0B0.0.0.0 Description A hard-coded or default root account credential allows an unauthenticated remote attacker to gain root-level access to the device through the exposed SSH service. The root password can be...

PT-2026-69519

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the construction of standalone TCP responses using TCP-AO TCP Authentication Option options. The functions tcp v4 send ack and tcp v6 send response create responses...

PT-2026-69909

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description Dokploy is a self-hostable Platform as a Service PaaS. A shell injection flaw exists in the apps/dokploy/server/api/routers/destination.ts file where the destination.testConnection mutation...

PT-2026-69544

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the pep get sb function. The problem occurs because pep get sb does not account for the possibility that pskb may pull might relocate the socket buffer s...

PT-2026-69943

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description Dokploy is a self-hostable Platform as a Service PaaS that allows an authenticated low-privilege member to execute arbitrary commands on the control-plane host. The issue occurs because the...

PT-2026-69509

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/sdma7.1 component where the use of the BUG ON function can cause the kernel to crash unnecessarily in certain cases. The BUG ON function is a kernel...

PT-2026-69875

Name of the Vulnerable Software and Affected Versions Pega Platform versions 8.5.0 through 25.1.2 Description Improper validation of cryptographic signatures may allow an attacker to bypass security controls. Recommendations At the moment, there is no information about a newer version that contai...

PT-2026-69514

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/gfx12.1 component where the use of the BUG ON function can cause the kernel to crash unnecessarily in certain cases. The BUG ON function is a kernel...

PT-2026-69893

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the file format plugins, specifically those handling PSD and PAA files. A remote attacker can exploit this by tricking a user into opening a specially crafted image file, which...

PT-2026-69964

Name of the Vulnerable Software and Affected Versions Feast affected versions not specified Description Improper deserialization of user-defined functions UDFs stored in the registry, which are serialized using the dill library, allows for arbitrary code execution. In default configurations, a...

PT-2026-69961

Name of the Vulnerable Software and Affected Versions Feast affected versions not specified feast-operator affected versions not specified Description Feast and feast-operator use a default configuration of "no auth", which means no security manager is installed. This allows unauthenticated and...

PT-2026-69967

Name of the Vulnerable Software and Affected Versions Red Hat OpenShift AI RHOAI affected versions not specified Description A flaw exists in the Red Hat OpenShift AI RHOAI overlay for the training operator. The overlay incorrectly aggregates management permissions for trainjobs into the native...

PT-2026-69997

Name of the Vulnerable Software and Affected Versions UpdateHub affected versions not specified Description The over-the-air update client contains a resource leak in the start coap client function within subsys/mgmt/updatehub/updatehub.c. When a connection to the UpdateHub server fails during...

PT-2026-69969

Name of the Vulnerable Software and Affected Versions shim application affected versions not specified Description A NULL pointer vulnerability exists in the dp.c library of the shim application. This issue occurs due to a missing NULL pointer check, which could allow an attacker to cause a denia...

PT-2026-69866

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.1.6 Discourse versions prior to 2026.5.2 Discourse versions prior to 2026.6.1 Discourse versions prior to 2026.7.0 Description An authenticated user can eavesdrop on private AI bot conversations by accessing th...

PT-2026-69996

Name of the Vulnerable Software and Affected Versions react18-use affected versions not specified Description react18-use, a React 19 use hook shim, contained malicious commits in its default branch between 2026-05-19 01:07:01 and 2026-05-19 15:20:43. The issue involves the addition of...

PT-2026-69958

Name of the Vulnerable Software and Affected Versions ml-metadata affected versions not specified Description An outdated statically-linked gRPC stack in ml-metadata is susceptible to HTTP/2 denial of service DoS issues. An attacker with network access to the MLMD pod can send specially crafted...

PT-2026-69970

Name of the Vulnerable Software and Affected Versions react-tracked affected versions not specified Description Malicious commits were introduced into the default branch of the repository, which execute remote attacker-controlled code on developer workstations during the npm install process. The...

PT-2026-69549

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the virtual file system VFS helper forget cached acl where it fails to preserve the ACL DONT CACHE state. This state is intended to be constant for inodes in filesyste...