PT-2026-95619

IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated session due to improper authentication via an unvalidated SSO header...

PT-2026-95627

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An authenticated privileged CLI user can execute arbitrary shell commands with root privileges. This occurs due to a command injection flaw in the create csr wildcard CLI command via the...

PT-2026-101959

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102219

ghsa-9h84-qmv7-982p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95706

Name of the Vulnerable Software and Affected Versions microsandbox versions prior to 0.5.10 Description The software serializes NetworkConfig secret values into the --network-config argument and passes per-sandbox secrets through repeated --env arguments within sdk/rust/lib/runtime/spawn.rs and...

PT-2026-100243

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95210

Name of the Vulnerable Software and Affected Versions Deck affected versions not specified Description The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs. This occurs because the system fails to validate whether the user owns or has the...

PT-2026-95247

Name of the Vulnerable Software and Affected Versions Easy Appointments versions prior to 4.0.2.2 Description The plugin fails to use an unguessable token to authorize appointment cancellation and confirmation actions via mail-links. The token is derived from a hardcoded source-embedded salt and...

PT-2026-101139

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100591

Security vulnerability affects the clamav package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100115

ghsa-9h8m-3fm2-qjrq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101731

ghsa-6v53-7c9g-w56r affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100223

Security vulnerability affects the temporal-server package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95509

Name of the Vulnerable Software and Affected Versions spatie Scotty versions prior to 1.4.3 Description A remote attack is possible through the Self Update Handler component. The SelfUpdater::update function in the app/Updater/SelfUpdater.php file allows the download of code without an integrity...

PT-2026-100232

ghsa-g8m3-5g58-fq7m affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101551

Security vulnerability affects the n8n package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95207

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logged-in user can retrieve a list of memberships for a circle they do not belong to by guessing a 62^15 complex unique identifier. This is an Insecure Direct...

PT-2026-101086

ghsa-gx3x-vq4p-mhhv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95480

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.19.6 Description An integer overflow occurs in the Op RGB24 32 to YCbCr::convert colorspace function when processing extremely large RGB images created via heif image create and heif image add plane. This overflow...

PT-2026-101903

ghsa-j3q9-mxjg-w52f affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95227

Name of the Vulnerable Software and Affected Versions OAKlouds affected versions not specified Description An Arbitrary File Read issue exists in OAKlouds developed by HGiga. Unauthenticated remote attackers can use Relative Path Traversal—a technique used to access files and directories stored...

PT-2026-102149

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102145

Security vulnerability affects the spark-sc213-jdk17-py312 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95229

Name of the Vulnerable Software and Affected Versions ManageEngine DataSecurity Plus versions prior to 6310 Description An agent authentication bypass exists that allows unenrolled agents to send requests without proper authentication. Recommendations Update ManageEngine DataSecurity Plus to...

PT-2026-102038

Security vulnerability affects the azure-functions-node package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102098

ghsa-jgfp-53c3-624w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95341

Name of the Vulnerable Software and Affected Versions Jeg Kit for Elementor versions prior to 3.2.17 Description Stored Cross-Site Scripting XSS occurs due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages via...

PT-2026-95276

Name of the Vulnerable Software and Affected Versions Divi versions 5.0 through 5.11.1 Description The software allows unauthenticated attackers to execute arbitrary shortcodes because it fails to properly validate a value before running the do shortcode function. If the 'Force Enable D4 Shortcod...

PT-2026-101535

Security vulnerability affects the apache-hive package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100829

ghsa-394x-vwmw-crm3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101582

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101457

ghsa-c4r9-r8fh-9vj2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100221

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101657

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95363

Name of the Vulnerable Software and Affected Versions ABB Freelance Controller DCP versions 2013 through 2019 SP1 ABB Freelance Controller AC700 versions 2013 through 2019 SP1 ABB Freelance Controller AC800 versions 2013 through 2019 SP1 ABB Freelance Controller AC900 versions 2013 through 2019 S...

PT-2026-102106

Security vulnerability affects the clamav package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102213

ghsa-72xf-g2v4-qvf3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100518

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100355

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101929

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100190

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101099

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100822

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101511

Security vulnerability affects the expat package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100392

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101248

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102262

Security vulnerability affects the clamav package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-99979

rustls-webpki rustls/webpki versions 0.101.0 through 0.103.11 and 0.104.0-alpha releases before 0.104.0-alpha.6 ignore X.509 name constraints that apply to URI names, causing such constraints to be accepted rather than enforced. Because name constraints are restrictions on otherwise properly issu...

PT-2026-99983

rustls-webpki rustls/webpki versions 0.101.0 through 0.103.11 and 0.104.0-alpha releases before 0.104.0-alpha.6 ignore X.509 name constraints that apply to URI names, causing such constraints to be accepted rather than enforced. Because name constraints are restrictions on otherwise properly issu...

PT-2026-99973

rustls-webpki rustls/webpki versions 0.101.0 through 0.103.11 and 0.104.0-alpha releases before 0.104.0-alpha.6 ignore X.509 name constraints that apply to URI names, causing such constraints to be accepted rather than enforced. Because name constraints are restrictions on otherwise properly issu...