PT-2026-94361

Mattermost Desktop App versions =6.2 6.2.2.0 fails to validate the IPC sender in the leaveCall handler which allows a malicious or compromised Mattermost server or a user with script access to a connected server view to disconnect an active call belonging to a different connected server via the...

PT-2026-94238

Name of the Vulnerable Software and Affected Versions WWBN AVideo through commit e01e41ecc Description A broken access control flaw exists in the 'objects/userVerifyEmail.php' endpoint. The script disables login requirements via the $global'ignoreUserMustBeLoggedIn' variable and accepts the users...

PT-2026-95011

Name of the Vulnerable Software and Affected Versions mport versions prior to 2.7.8 Description The mport verify package function in libmport/verify.c may continue execution after MD5File or SHA256 File fails. This allows the system to compare an expected checksum against stale data remaining in...

PT-2026-94915

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack overflow exists in the ljca enumerate gpio function. The function reads the bank num variable from a device and uses it to control a loop that writes data into the valid pin arra...

PT-2026-95120

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.52 Description Missing authorization in Storage allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted PDF file. Site isolation is a security...

PT-2026-94226

Name of the Vulnerable Software and Affected Versions Snowflake CLI versions prior to 3.27.0 Description Improper input validation allows unsanitized user-controlled values to be interpolated into SQL strings executed as multi-statement queries. An attacker can execute arbitrary SQL statements...

PT-2026-94190

Name of the Vulnerable Software and Affected Versions NitroSense affected versions not specified PredatorSense affected versions not specified Description The Acer System Monitoring component, used in NitroSense and PredatorSense, contains a flaw where a WebSocket service is configured to listen ...

PT-2026-94917

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ffs dmabuf transfer function within the USB gadget f fs module. In error paths related to endpoint-disabled ESHUTDOWN and request-allocation failure ENOMEM, the...

PT-2026-94475

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the virtio RTC implementation where alarm requests wait indefinitely for the device to return requestq buffers while the rtc device.ops lock is held. During a surprise...

PT-2026-94649

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the OCFS2 heartbeat o2hb component of the Linux kernel. The problem occurs because heartbeat regions publish the o2hb region structure as private da...

PT-2026-95144

Name of the Vulnerable Software and Affected Versions Vvveb versions 1.0.0 through 1.0.8.4 Description An authenticated user with the Editor role and editor/ permission can perform a path traversal attack. The saveGlobalElements function in admin/controller/editor/global-trait.php improperly...

PT-2026-94161

Name of the Vulnerable Software and Affected Versions WPLP Cookie Consent versions prior to 4.4.4 Description In multisite installations, the plugin fails to escape a value submitted through a public endpoint before it is output within a JavaScript context on an administrative screen. This allows...

PT-2026-94294

Name of the Vulnerable Software and Affected Versions ash authentication versions 0.5.0 through 4.14.9 ash authentication versions 5.0.0-rc.0 through 5.0.0-rc.13 Description An authorization bypass allows an authenticated attacker to overwrite and confirm another user's email address to take over...

PT-2026-94455

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the net/smc module when the smc llc flow stop function resets a flow structure using a blind memset. If the flow-qentry variable is non-NULL, the pointer is...

PT-2026-94531

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the blk-iolatency component where the io.latency controller can throttle a group that lacks its own latency target. This occurs when a sibling misses its target, causi...

PT-2026-94667

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rapidio component where rio alloc net stores a newly allocated rio net in mport-net before the device is registered. If rio add net fails, the device reference is...

PT-2026-94172

Name of the Vulnerable Software and Affected Versions PuppyFW versions prior to 0.4.5 Description Insufficient authorization on a REST route allows any authenticated user, including those with subscriber roles, to add, modify, or delete arbitrary blog options. This occurs because the plugin...

PT-2026-94240

Name of the Vulnerable Software and Affected Versions Grav versions 2.0.0-rc.1 through 2.0.21 Description The Twig content sandbox fails to restrict dump and serialize filters, specifically print r, vardump, json encode, yaml encode, and string. This occurs because the...

PT-2026-94442

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm64 architecture regarding the Memory Tagging Extension MTE store-only tag check mode. When a user opts into this mode, the SCTLR EL1.TCSO0 bit is set. Because...

PT-2026-94276

Name of the Vulnerable Software and Affected Versions PublishPress Series versions prior to 3.1.4 Description An SQL Injection issue exists that allows an administrator to execute malicious SQL queries. SQL Injection is a technique where an attacker inserts malicious SQL code into a query,...

PT-2026-94831

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/nldev component where the nested attribute RDMA NLDEV ATTR STAT HWCOUNTERS is not properly validated. The top-level policy only validates the container and...

PT-2026-94146

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Memory corruption occurs when processing the escape handling flow due to insufficient user buffer sizes. This issue requires local access to be exploited and can...

PT-2026-94776

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tegra241 cmdqv probe function where the error IRQ is requested before the cmdqv-vintfs array is allocated and cmdqv-num vintfs is set. If a CMDQV remains enabled...

PT-2026-94351

Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions prior to 11.1.0.3 Description An unauthenticated attacker with remote access can exploit a Server-Side Request Forgery SSRF flaw. SSRF is a vulnerability that allows an attacker to induce the...

PT-2026-94204

Name of the Vulnerable Software and Affected Versions Nuevector affected versions not specified Description Users authenticated through SAML or OpenID Connect OIDC may experience a session mix-up where one user receives another user's authenticated session. This occurs when multiple Single Sign-O...

PT-2026-94614

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In zoned file systems, the btrfs delayed refs rsv refill function returns -EAGAIN when the sum of over-committed metadata and zone unusable bytes exceeds the usable size in a metadata...

PT-2026-94777

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/tegra241-cmdqv component where the error interrupt service routine ISR is not properly synchronized with VINTF initialization and deinitialization. The...

PT-2026-94739

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dmirror fault function, which is invoked by dmirror read and dmirror write retry loops when a device page table entry is missing. If the mirrored mm memory...

PT-2026-94645

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/sun4i component where the sun4i crtc init function returns NULL instead of an error pointer when layer initialization fails. Because the caller function sun4i...

PT-2026-94275

Shop manager SQL Injection in WP-Lister Lite for eBay = 3.8.11 versions...

PT-2026-94991

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the synopsys dw-dp component of the drm/bridge. The DisplayPort AUX channel is initialized and registered during the dw dp bind function but is not subsequently...

PT-2026-94616

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An error handling issue exists in the sd probe function within the SCSI subsystem. When sd large pool create fails after device add&sdkp-disk dev has already succeeded, the system fails ...

PT-2026-94577

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvme-apple driver where the admin queue, allocated via blk mq alloc queue, is not properly destroyed during removal. When the controller fails to initialize and is...

PT-2026-94567

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/cxgb4 component where the per-device debugfs tree, created by c4iw alloc via setup debugfs, is not properly removed during registration failure. Specifically,...

PT-2026-94962

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the rtw89 ppdu str function within the wifi rtw89 module. The problem is caused by an incorrect comparison operator where a should be = to properl...

PT-2026-94847

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the mtdswap component. In the mtdswap add mtd function, if a debugfs setup failure occurs after the successful registration of a blktrans device, the mbd de...

PT-2026-94468

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the gic acpi parse iaffid function where a MADT GICC entry may not correspond to a logical CPU recognized by the kernel. This causes the cpu variable to be initialized...

PT-2026-94336

Name of the Vulnerable Software and Affected Versions InternLM LMDeploy versions prior to 0.17.1 Description A reachable assertion issue exists in the DistServe decode migration loop. An unauthenticated attacker can terminate the inference engine by submitting a migration request containing an...

PT-2026-94586

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A self-deadlock occurs in the isp4sd pwron and init function. The function acquires the ops mutex using a guard; however, if an initialization failure occurs, it jumps to an error path...

PT-2026-94547

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mi enum attr function within the ntfs3 file system. The validation for start and end Virtual Cluster Numbers VCN for non-resident attributes is insufficient. When...

PT-2026-94150

Information Disclosure when a pointer is reused after being deallocated...

PT-2026-99526

TuxCare rebuilt drupal/commerce paybox to address 1 CVE. Fixed in 7.1.5-p1+tuxcare...

PT-2026-94156

Name of the Vulnerable Software and Affected Versions Multi Uploader for Gravity Forms versions prior to 1.2.0 Description Insufficient file type validation during chunked upload handling in the move file function allows unauthenticated attackers to upload arbitrary files to the server. This flaw...

PT-2026-95022

Name of the Vulnerable Software and Affected Versions Scoold versions prior to 1.69.0 Description Users with personal API tokens can retrieve replies from questions in private spaces they are not authorized to access. This occurs because the getPostReplies function in ApiController.java fails to...

PT-2026-94293

Name of the Vulnerable Software and Affected Versions ash authentication versions 0.6.0 through 4.14.9 ash authentication versions 5.0.0-rc.0 through 5.0.0-rc.13 Description Insufficient session expiration allows an attacker who obtains a victim's OAuth2 state value to replay the callback and sig...

PT-2026-99690

cosmian kyber is a fork of Argyle-Software/kyber that has seen no maintainer activity. It inherits the fork parent's broken AVX2 constant-time code, and the open fix pull request Cosmian/kyber6 has gone unanswered. Recommended alternatives: - aws-lc-rs - graviola...

PT-2026-95017

Name of the Vulnerable Software and Affected Versions mport versions prior to 2.7.8 Description In the MidnightBSD Package Manager, directory assets handled as ASSET DIR or ASSET DIR OWNER MODE in the libmport/bundle read install pkg.c file utilize path-based mport mkdirp, ownership, and permissi...

PT-2026-95015

Name of the Vulnerable Software and Affected Versions mport versions prior to 2.7.8 Description The MidnightBSD Package Manager contains an issue where the create sample file function in libmport/bundle read install pkg.c fails to constrain absolute source and destination paths from the sample-fi...

PT-2026-95006

Name of the Vulnerable Software and Affected Versions SigNoz versions 0.88.0 through 0.142.0 Description Authenticated attackers can execute arbitrary SQL queries and retrieve results in HTTP responses. This occurs because the trace-funnel analytics endpoints interpolate the service name and span...

PT-2026-94375

Name of the Vulnerable Software and Affected Versions RAGFlow versions prior to 0.27.3 Description Authenticated attackers can read arbitrary files by exploiting missing path validation. By providing absolute file paths in the file path parameter, users with valid access tokens can access any fil...