PT-2026-76582

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an incorrect integer conversion in event tagging.c when evtag unmarshal header uses evtag decode int to decode an attacker-controlled uint32 payload length and returns it as a signed int. Values above INT MAX...

PT-2026-69125

Name of the Vulnerable Software and Affected Versions HKUDS nanobot versions prior to 0.3.0 Description An OS command injection flaw exists in the Shell Allowlist Handler component within the nanobot/agent/tools/shell.py file. The issue resides in the ExecTool. guard command and ExecTool. spawn...

PT-2026-68854

Name of the Vulnerable Software and Affected Versions V-Secure Jingyun Antivirus version 2.4.2.39 Description An issue exists in the Kernel Driver component within the ZyArk.sys library. A flaw in an unknown function allows for improper access controls, which can be exploited by a local attacker...

PT-2026-69072

Name of the Vulnerable Software and Affected Versions ClamAV affected versions not specified Description An issue exists in the PESpin file format parser where improper boundary checks for content during scanning can lead to an integer overflow. An unauthenticated remote attacker can exploit this...

PT-2026-69151

Name of the Vulnerable Software and Affected Versions JupyterHub versions prior to 5.5.0 Description Invalid input provided to form-based login authenticators allows an unauthenticated attacker to insert an unbounded, attacker-controlled username into failed-login logs. This can lead to the...

PT-2026-69150

Name of the Vulnerable Software and Affected Versions Kata Containers versions prior to 4.0.0 Description The kata-runtime allows host code execution due to an unvalidated configuration path annotation. The runtime accepts an arbitrary io.katacontainers.config path pod annotation and loads the...

PT-2026-69123

Name of the Vulnerable Software and Affected Versions Consul Community Edition versions 1.18.21 through 2.0.2 Consul Enterprise versions 1.18.21 through 2.0.2 Description An issue exists when the software is configured to use the Vault Connect CA provider with JWT or AppRole authentication. A...

PT-2026-68894

Name of the Vulnerable Software and Affected Versions dracut affected versions not specified Description A flaw exists in the die error-handling function which writes messages into a shell script within the initramfs emergency-hook directory without proper shell-quoting. An attacker on the adjace...

PT-2026-69158

Name of the Vulnerable Software and Affected Versions Ghostfolio versions prior to 3.4.0 Description The Stripe checkout success-URL handler at GET /api/v1/subscription/stripe/callback?checkoutSessionId= retrieves the Stripe Checkout Session by ID and grants a Premium subscription to the client...

PT-2026-69159

Name of the Vulnerable Software and Affected Versions Ruby LSP VS Code extension versions prior to 0.10.4 Description Workspace-level settings in the extension can be manipulated via a .vscode/settings.json file in a malicious repository. An attacker can override the path to the Ruby executable,...

PT-2026-69121

Name of the Vulnerable Software and Affected Versions Consul Community Edition versions 1.2.0 through 2.0.2 Consul Enterprise versions 1.2.0 through 2.0.2 Description An uncontrolled resource consumption issue exists in the Connect CA roots endpoint. This allows a remote caller to expand the...

PT-2026-69132

Name of the Vulnerable Software and Affected Versions Pathling Server versions prior to 2.0.0 Description The /$result endpoint allows a caller with a valid async export job ID to provide file parameter values containing path traversal sequences. Path traversal is a technique used to access files...

PT-2026-69127

Name of the Vulnerable Software and Affected Versions gopacket versions prior to 1.7.1 Description Multiple layer decoders use attacker-controlled lengths, counts, or offsets before validating them against packet buffers. This allows a crafted packet processed through DecodingLayerParser or...

PT-2026-69076

Name of the Vulnerable Software and Affected Versions ClamAV affected versions not specified Description A flaw in the XAR file format parser allows an unauthenticated remote attacker to cause memory corruption. This occurs due to improper boundary checks for content within XAR files during the...

PT-2026-68848

Name of the Vulnerable Software and Affected Versions Jiangmin Antivirus 21 Description A flaw in the Minifilter Port component within the kvcore.sys library allows for improper access controls. This issue occurs in the MessageNotifyCallback function and requires local access to be exploited...

PT-2026-69138

Name of the Vulnerable Software and Affected Versions SonicWall Global VPN Client versions prior to 4.10.8.1109 Description An out-of-bounds kernel memory read exists in the SWIPsec.sys driver. This flaw allows a local attacker to trigger a system crash. Recommendations Update SonicWall Global VP...

PT-2026-69046

Name of the Vulnerable Software and Affected Versions nothings stb TrueType library versions prior to 1.27 Description A heap-buffer-overflow occurs when parsing malformed TrueType Font TTF files. The issue is located in the glyph data parsing path within the stbtt GetGlyphShapeTT function of the...

PT-2026-76581

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent can read beyond a contiguous evbuffer region in event tagging.c when decode tag internal requests at most five bytes from evbuffer pullup but iterates using the full logical buffer length. A fragmented evbuffer...

PT-2026-76583

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in http.c. evhttp decode uri internal decodes percent-encoded %00 bytes into literal NUL characters, which can cause downstream C string operations to truncate a path and bypass...

PT-2026-76579

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a use-after-free in buffer.c when evbuffer add buffer reference processes an output buffer whose out total len is zero. evbuffer free all chains frees the initial empty chain without resetting outbuf-first,...

PT-2026-70006

Name of the Vulnerable Software and Affected Versions TrueConf Server affected versions not specified Description Improper management of code generation allows a remote attacker who has already achieved code execution within the isolated environment of the server to escape the sandbox and execute...

PT-2026-70005

Name of the Vulnerable Software and Affected Versions TrueConf Server affected versions not specified Description An issue exists where a critical undocumented function lacks authentication. A remote attacker connecting via port 4307/TCP can invoke this function to execute an arbitrary script on...

PT-2026-69120

Name of the Vulnerable Software and Affected Versions Consul Community Edition versions 1.17.0 through 2.0.2 Consul Enterprise versions 1.17.0 through 2.0.2 Description An uncontrolled resource consumption issue exists in the Connect authorization endpoint. This flaw allows a caller to expand the...

PT-2026-69122

Name of the Vulnerable Software and Affected Versions Consul Community Edition versions 1.19.1 through 2.0.2 Consul Enterprise versions 1.19.1 through 2.0.2 Description An authorization bypass exists in the transaction API where the session:write ACL permission is not enforced during session...

PT-2026-76578

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent processes chunked HTTP trailers in http.c through evhttp read trailer and merges them into request headers. The fix introduces evhttp parse headers impl and a temporary trailer header list. An unauthenticated...

PT-2026-68837

Name of the Vulnerable Software and Affected Versions Microsoft Teams affected versions not specified Description Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer...

PT-2026-68622

Name of the Vulnerable Software and Affected Versions html sanitize ex versions 0.3.1 through 1.5.2 Description An Open Redirect issue exists in the HTML5 scrubber where an unauthenticated remote attacker can retarget an existing form on a rendering page to capture submitted data, including...

PT-2026-68523

Name of the Vulnerable Software and Affected Versions Apache Portable Runtime Utility versions 1.3.0 through 1.6.3 Description A heap-based buffer overflow occurs in the memcached client. A heap-based buffer overflow is a memory corruption issue that happens when an application writes more data t...

PT-2026-68707

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description An out of bounds write in V8, the open-source high-performance JavaScript and WebAssembly engine, allows a remote attacker to execute arbitrary code within a sandbox by inducing the us...

PT-2026-68692

Name of the Vulnerable Software and Affected Versions Google Chrome on Linux versions prior to 151.0.7922.109 Description A use after free issue exists in Aura, which can allow a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape by using a...

PT-2026-68683

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A heap buffer overflow exists in the CrashReporting component. This issue allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox...

PT-2026-68522

Name of the Vulnerable Software and Affected Versions Apache Portable Runtime Utility versions 1.6.0 through 1.6.3 Description A heap-based buffer overflow occurs in the redis client of the Apache Portable Runtime Utility. A heap-based buffer overflow is a memory corruption issue that happens whe...

PT-2026-68411

Name of the Vulnerable Software and Affected Versions GStreamer gst-plugins-good affected versions not specified Description A flaw exists in the rtph264depay and rtph265depay RTP depayloader elements. These elements fail to enforce a maximum size limit on the reassembly buffer during the...

PT-2026-68721

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A use after free issue in Skia allows a remote attacker who has compromised the renderer process to execute arbitrary code within a sandbox by using a crafted HTML page. Use after free...

PT-2026-68694

Name of the Vulnerable Software and Affected Versions Google Chrome on Linux versions prior to 151.0.7922.109 Description A use after free issue in Aura allows a remote attacker to potentially perform a sandbox escape by using a crafted HTML page. Use after free is a memory corruption flaw that...

PT-2026-68698

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description Insufficient validation of untrusted input in Workers allows a remote attacker who has compromised the renderer process to bypass site isolation through the use of a crafted HTML page...

PT-2026-68709

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description Insufficient validation of untrusted input in Codecs allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page. A sandbox escape is a technique used to...

PT-2026-68693

Name of the Vulnerable Software and Affected Versions Google Chrome on Linux versions prior to 151.0.7922.109 Description An out of bounds write occurs in the GPU component, which may allow a remote attacker who has already compromised the renderer process to perform a sandbox escape. This is...

PT-2026-68711

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A use after free issue exists in the Web Authentication component. This flaw allows a remote attacker to potentially achieve a sandbox escape by inducing the user to visit a specially...

PT-2026-68716

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A use after free issue exists in the Media component on Windows. This flaw allows a remote attacker to potentially achieve a sandbox escape by inducing the user to open a specially...

PT-2026-68697

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description Insufficient policy enforcement in Navigation allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. A sandb...

PT-2026-68720

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A use after free issue exists in the Payments component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

PT-2026-68682

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description A use after free issue exists in WebGL. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker...

PT-2026-68882

Name of the Vulnerable Software and Affected Versions WordPress affected versions not specified Description WordPress is subject to a pre-authentication reflected cross-site scripting XSS issue on the login screen. This allows an attacker to execute arbitrary JavaScript in the site origin without...

PT-2026-68832

Name of the Vulnerable Software and Affected Versions Azure SQL Managed Instance affected versions not specified Description Improper restriction of the communication channel to intended endpoints allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment,...

PT-2026-68442

Name of the Vulnerable Software and Affected Versions Carbon console affected versions not specified Description The Ajax processor fails to protect state-changing operations from Cross-Site Request Forgery CSRF, a type of attack that tricks an authenticated user into executing unintended actions...

PT-2026-68772

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.9 macOS Sonoma versions prior to 14.8.9 macOS Tahoe versions prior to 26.6.1 Description An authentication issue exists in Screen Sharing due to improper state management. This flaw allows a network-based...

PT-2026-68700

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A use after free issue exists in the Payments component. This flaw allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by...

PT-2026-68518

Name of the Vulnerable Software and Affected Versions APR-util versions prior to 1.6.4 Description A bug allows a stack recursion attack against any library consumer that parses XML from untrusted sources and utilizes the apr xml quote elem function. Recommendations Upgrade to version 1.6.4...

PT-2026-68625

Name of the Vulnerable Software and Affected Versions html sanitize ex versions 0.3.1 through 1.5.3 Description An injection flaw exists in the CSS scrubber of the software, allowing an unauthenticated remote attacker to inject CSS at-rules, such as importing remote stylesheets, into pages served...