PT-2026-69369

Name of the Vulnerable Software and Affected Versions FoodBoxBooker versions prior to 1.0.8 Description An issue exists where the plugin fails to verify if the user account being updated belongs to the user initiating the request. This allows authenticated users with Subscriber-level access or...

PT-2026-69970

Name of the Vulnerable Software and Affected Versions react-tracked affected versions not specified Description Malicious commits were introduced into the default branch of the repository, which execute remote attacker-controlled code on developer workstations during the npm install process. The...

PT-2026-69967

Name of the Vulnerable Software and Affected Versions Red Hat OpenShift AI RHOAI affected versions not specified Description A flaw exists in the Red Hat OpenShift AI RHOAI overlay for the training operator. The overlay incorrectly aggregates management permissions for trainjobs into the native...

PT-2026-69996

Name of the Vulnerable Software and Affected Versions react18-use affected versions not specified Description react18-use, a React 19 use hook shim, contained malicious commits in its default branch between 2026-05-19 01:07:01 and 2026-05-19 15:20:43. The issue involves the addition of...

PT-2026-69544

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the pep get sb function. The problem occurs because pep get sb does not account for the possibility that pskb may pull might relocate the socket buffer s...

PT-2026-69326

Name of the Vulnerable Software and Affected Versions Almico Speedfan version 4.52 Description A weakness in the MSR Index Handler component allows a local attacker to cause a memory leak. This issue occurs within the KiSystemCall64 function located in the speedfan.sys library. Recommendations At...

PT-2026-69380

Name of the Vulnerable Software and Affected Versions Advanced Classifieds & Directory Pro versions prior to 3.4.3 Description An issue allows unauthenticated users to expose sensitive information through the AJAX action acadp public custom fields listings. This leads to the disclosure of...

PT-2026-69528

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.1.0-rc1 Description An issue exists in the ice parser profile init function where the system fails to validate the ptype value provided through VIRTCHNL. Because the set bit operation uses a bitmap with a maximum size of...

PT-2026-69312

Name of the Vulnerable Software and Affected Versions PV-Bhat gemsuite-mcp version 1.0.0 Description A path traversal issue exists within the gemini search/gemini reason/gemini process/gemini analyze component, specifically in the src/handlers/unified-gemini.ts file. A local attacker can exploit...

PT-2026-69278

Name of the Vulnerable Software and Affected Versions adenot mcp-google-search versions prior to 0.3.2 Description A server-side request forgery SSRF issue exists within the read webpage component in the src/index.ts file. This occurs when the url argument is manipulated, allowing for local...

PT-2026-69256

Name of the Vulnerable Software and Affected Versions NellyW8 MCP4EDA version 1.0.0 Description Command injection is possible within the run openlane/view waveform component. This occurs when the design name/vcd file argument is manipulated. Local access is required to execute this attack...

PT-2026-69267

Name of the Vulnerable Software and Affected Versions Nexter Blocks versions prior to 5.0.2 Description Insufficient access control in a REST endpoint allows users with the Contributor role or higher to save arbitrary global CSS. This stored CSS is rendered site-wide on the front end, which can...

PT-2026-69259

Name of the Vulnerable Software and Affected Versions Jane-xiaoer skill-vision-control versions prior to 1.3.1 Description A path traversal issue exists in the getSkillVersionsDir function within the src/svc/utils/config.ts file. This occurs when the skillName argument is manipulated, allowing an...

PT-2026-69297

Name of the Vulnerable Software and Affected Versions MingSoft MCMS versions prior to 3.0.7 Description A remote information disclosure issue exists within the ms-mdiy component. The flaw is located in an unknown function of the '/mdiy/form/data/list' endpoint, allowing a remote attacker to...

PT-2026-69283

Name of the Vulnerable Software and Affected Versions code-projects Task Management System version 1.0 Description An improper authentication issue exists within the Login component in the /index.php file. A remote attacker can bypass authentication by manipulating the Password argument...

PT-2026-69305

Name of the Vulnerable Software and Affected Versions lmammino oidc-authorizer versions prior to 0.4.1 Description The Lambda Authorizer component contains an issue where raw Authorization header values and complete bearer tokens or JWTs are logged on authentication failure paths, potentially...

PT-2026-69318

Name of the Vulnerable Software and Affected Versions PhialsBasement KoboldCPP-MCP-Server version 1.0.0 Description A server-side request forgery SSRF issue exists within the BaseConfigSchema component in the src/index.ts file. The flaw occurs in the makeRequest function, where manipulation of th...

PT-2026-69292

Name of the Vulnerable Software and Affected Versions dresende node-sql-query versions 0.1.25 through 0.1.28 Description A SQL injection issue exists in the Request Parameter Handler component within the lib/Select.js library. The flaw is located in the SelectQuery.from and SelectQuery.build...

PT-2026-69268

Name of the Vulnerable Software and Affected Versions WP Photo Album Plus versions prior to 9.2.07.002 Description The plugin fails to perform capability or nonce checks on a public REST endpoint action. This allows unauthenticated users to delete generated album export ZIP archives stored by the...

PT-2026-69281

Name of the Vulnerable Software and Affected Versions anubissbe ProjectHub-Mcp versions prior to 5.0.1 Description A weakness in the Webhooks API component, specifically within the file backend-fix/complete backend.js, allows for server-side request forgery SSRF. This occurs when the url argument...

PT-2026-69251

Name of the Vulnerable Software and Affected Versions aktsmm skill-ninja-mcp-server version 0.1.0 Description Local manipulation of the workspacePath argument in the getInstalledSkills, installSkill, updateAgentsMd, and uninstallSkill functions within the src/installer.ts file allows for path...

PT-2026-69266

Name of the Vulnerable Software and Affected Versions Create WordPress plugin versions prior to 2.5.4 Description An authorization check is missing before returning content over a REST API route. As a side effect, this route publishes the requested content, which allows unauthenticated attackers ...

PT-2026-69321

Name of the Vulnerable Software and Affected Versions Uasoft Badaso version 3.0.0-alpha Description A permission issue exists within the File API component, specifically affecting the ApiRequest::class function in the src/Routes/api.php file. This flaw allows a remote attacker to manipulate the...

PT-2026-69310

Name of the Vulnerable Software and Affected Versions NocteDefensor LudusMCP versions prior to 1.0.25 Description A path traversal flaw exists within the insert creds range config component, specifically in the src/tools/insertCredsRangeConfig.ts file. A local attacker can manipulate the configPa...

PT-2026-69302

Name of the Vulnerable Software and Affected Versions macrozheng mall version 0504e86 Description A flaw in the mall-portal module allows for weak password recovery. The issue resides in the /sso/getAuthCode endpoint. A remote attacker can execute a manipulation to exploit this, although the atta...

PT-2026-69289

Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0 Description A remote SQL injection exists due to improper processing of the /viewdoctor.php endpoint. An attacker can exploit this by manipulating the delid variable to execute unauthorized...

PT-2026-69264

Name of the Vulnerable Software and Affected Versions Solace Extra versions prior to 1.6.1 Description The Solace Extra WordPress plugin fails to perform capability or nonce checks in an AJAX action. This allows any authenticated user, including those with subscriber privileges, to update post me...

PT-2026-69315

Name of the Vulnerable Software and Affected Versions Nikolaibibo claude-comfyui-mcp version 1.0.0 Description A path traversal issue exists in the comfy upload image component within the src/tools/utils.ts file. The copyFileSync function does not properly validate the image path argument, allowi...

PT-2026-69263

Name of the Vulnerable Software and Affected Versions Slim SEO versions prior to 4.9.11 Description A post-meta preview feature fails to restrict access to posts that the user is authorized to edit, verifying only read access. This allows users with the Contributor role to read arbitrary post met...

PT-2026-69304

Name of the Vulnerable Software and Affected Versions Perl versions prior to 5.45.2 Description Out-of-bounds heap reads and writes occur during regular expression matching due to an undersized superlinear cache in the S regmatch function. The regex engine calculates the bit count for the...

PT-2026-69299

Name of the Vulnerable Software and Affected Versions 3CORESec Trapdoor versions prior to 1.2.3 Description Improper access controls exist in the DefaultFunction function, which allows a remote attacker to manipulate the system. Recommendations Update 3CORESec Trapdoor to version 1.2.3 or later. ...

PT-2026-69250

Name of the Vulnerable Software and Affected Versions abracadabra50 claude-sesh version 1.0.0 Description A flaw in the enrichSession function within getEnrichedData located in the src/services/enricher.ts file allows for path traversal. This occurs when the sessionId argument is manipulated. Pat...

PT-2026-69246

Name of the Vulnerable Software and Affected Versions Crypt::OpenSSL::PKCS12 versions prior to 1.98 Description A NULL pointer dereference occurs in the print attribute function when processing a zero length BMPSTRING attribute. The function uses Renewattribute, length, char to size the destinati...

PT-2026-69270

Name of the Vulnerable Software and Affected Versions Iptanus File Upload versions prior to 5.1.8 Description An issue exists where the software fails to properly sanitize and escape the uniqueuploadid parameter before incorporating it into a SQL statement. This allows unauthenticated users to...

PT-2026-69220

Name of the Vulnerable Software and Affected Versions D-Link DWR-M961 hardware version C1 versions prior to 1.1.5 C1 202607071108 Description A command injection issue exists in the '/boafrm/formL2tpv3ConfigSetup' endpoint. A remote attacker can inject arbitrary malicious commands through the...

PT-2026-69215

Name of the Vulnerable Software and Affected Versions D-Link DWR-M961 hardware version C1 versions prior to 1.1.5 C1 202607071108 Description A command injection issue exists in the '/boafrm/formUSSDSetup' endpoint. A remote attacker can inject arbitrary malicious commands through the ussdValue a...

PT-2026-69187

Name of the Vulnerable Software and Affected Versions INQUIRELAB mcp-bridge-api versions up to b30a82aa1d1d1139e0de846c41c8aadee6e06114 Description A command injection issue exists in the Servers Endpoint component within the mcp-bridge.js file. A remote attacker can exploit this by manipulating...

PT-2026-69231

Name of the Vulnerable Software and Affected Versions MSI Radix AXE6600 version v781521 Description A command injection issue exists in the 'wps.cgi' endpoint. Remote attackers can execute arbitrary commands and obtain root privileges by providing malicious input through the pin2g, pin5g, or pin6...

PT-2026-69181

Name of the Vulnerable Software and Affected Versions Download Monitor versions prior to 5.2.6 Description An issue exists where the plugin fails to perform authorization checks on a download-logging AJAX action. Additionally, the nonce a unique token used to prevent cross-site request forgery...

PT-2026-69182

Name of the Vulnerable Software and Affected Versions Solace Extra versions prior to 1.6.1 Description Insufficient capability checks in several AJAX actions, combined with the exposure of the protecting nonce on admin pages accessible to low-privileged users, allow individuals with roles as low ...

PT-2026-69169

Name of the Vulnerable Software and Affected Versions Newsletters WordPress plugin versions prior to 4.16 Description When the optional API is enabled, the software fails to strictly compare the API authentication key. This allows unauthenticated attackers to bypass authentication using type...

PT-2026-69184

Name of the Vulnerable Software and Affected Versions AI Engine versions prior to 3.6.6 Description An issue exists where the software fails to confine a caller-supplied file path before reading it and forwarding the contents to an external service. This allows users with a subscriber-level accou...

PT-2026-69236

Name of the Vulnerable Software and Affected Versions MSI Radix AXE6600 version v781521 Description Remote attackers can execute arbitrary commands and obtain root privileges on the underlying system. This is possible through the alg function, which triggers a command injection within the portFw...

PT-2026-69186

Name of the Vulnerable Software and Affected Versions AI Copilot – Content Generator versions prior to 1.5.7 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Unauthenticated attackers can achieve full site...

PT-2026-69210

Name of the Vulnerable Software and Affected Versions D-Link DWR-M961 hardware version C1 versions prior to 1.1.5 C1 202607071108 Description A command injection issue exists in the '/boafrm/formLtefotaUpgradeQuectel' endpoint. A remote attacker can inject arbitrary malicious commands through the...

PT-2026-69213

Name of the Vulnerable Software and Affected Versions D-Link DWR-M961 hardware version C1 versions prior to 1.1.5 C1 202607071108 Description A command injection issue exists in the '/boafrm/formTracerouteDiagnosticRun' endpoint. A remote attacker can inject arbitrary malicious commands through t...

PT-2026-69188

Name of the Vulnerable Software and Affected Versions Kirachon context-engine versions prior to 1.9.1 Description Command injection is possible within the review-git-diff Endpoint due to improper handling of the args variable in the execGitCommand function located in the src/mcp/utils/gitUtils.ts...

PT-2026-69192

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM nVMX component where the system fails to release vmcs12 pages when a nested VM-Enter fails due to an invalid guest state during the emulation of VMLAUNCH or...

PT-2026-69170

Name of the Vulnerable Software and Affected Versions Appointment Hour Booking versions prior to 1.5.88 Description The plugin fails to validate the booking price provided by the client against the service price configured on the server. This allows unauthenticated users to submit an arbitrary...

PT-2026-69196

Name of the Vulnerable Software and Affected Versions andreahaku llm memory mcp versions up to f11dc8bcff3ff8cf943a2945f99ff3b0bdc8a6d0 Description Command injection is possible through the manipulation of the hash argument within the auto.capture function located in the...