PT-2026-102118

ghsa-89gr-r52h-f8rx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100053

Security vulnerability affects the nfs-subdir-external-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100313

ghsa-p436-gjf2-799p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100576

Security vulnerability affects the forecastle package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100812

ghsa-f9f8-9pmf-xv68 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-102085

Security vulnerability affects the n8n package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100234

ghsa-7r86-cg39-jmmj affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101229

Security vulnerability affects the logstash-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100738

ghsa-vmq6-5m68-f53m affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100248

ghsa-rc42-6c7j-7h5r affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100026

Security vulnerability affects the cassandra-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100638

ghsa-w33c-445m-f8w7 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100740

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100125

Security vulnerability affects the logstash-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95688

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A remote authenticated attacker can execute arbitrary code because the software does not properly limit pathnames to a restricted directory. Recommendations At the moment, there is no...

PT-2026-100977

ghsa-92mm-2pjq-r785 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95433

Name of the Vulnerable Software and Affected Versions WinFsp versions prior to 2.2.26216 Description A null pointer dereference occurs in the kernel driver's Fast I/O device control handler due to a failure to validate the volume context before use. An unprivileged local user can cause a system...

PT-2026-95387

Name of the Vulnerable Software and Affected Versions NUUO Network Video Recorder version 2.0.0 Description Command Injection is possible via the 'handle import privilege.php' endpoint. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2026-100762

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101928

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101474

Security vulnerability affects the grafana-alloy package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95307

Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 3.3.2 Description The asset queued-events DELETE endpoints incorrectly verify the caller's Dag-axis permission using READ instead of EDIT. This allows any authenticated user with read access to a Dag to delete...

PT-2026-95396

Name of the Vulnerable Software and Affected Versions Imager for Perl versions prior to 1.036 Description Processing a TGA file with a colour map length of 32768 or more triggers an uncatchable process exit when using the Imager-read function. This occurs because the reader unpacks the two-byte...

PT-2026-95673

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper authorization allows a remote authenticated attacker to bypass security restrictions. Recommendations Restrict access to the system as a temporary mitigation measure. At the moment...

PT-2026-95317

Name of the Vulnerable Software and Affected Versions HCLSoftware AppScan 360° affected versions not specified Description A Path Traversal issue exists in the ASReportService component. This occurs due to improper handling of file paths, which allows an authenticated attacker to read or write...

PT-2026-95597

Name of the Vulnerable Software and Affected Versions Weaver E-cology affected versions not specified Description An unauthenticated SQL injection allows remote attackers to execute arbitrary SQL queries. This occurs when malicious input is submitted through the userIdentifiers GET parameter in t...

PT-2026-95311

Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager DSM versions prior to 7.2.1-69057-12 Synology DiskStation Manager DSM versions prior to 7.2.2-72806-9 Synology DiskStation Manager DSM versions prior to 7.3.2-86009-4 Synology DiskStation Manager DSM versions prior...

PT-2026-95318

Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management affected versions not specified Description A security misconfiguration involving improper access controls allows an authenticated attacker to view restricted data elements across tenant boundaries. This issue...

PT-2026-95328

Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management affected versions not specified Description Improper file validation controls lead to an unrestricted file upload issue. This allows an unauthenticated attacker to upload and execute malicious payloads, which can...

PT-2026-95417

Name of the Vulnerable Software and Affected Versions JBoss Enterprise Application Platform affected versions not specified Description A flaw exists in the Elytron component of EAP. When an application security domain is backed by an Elytron token-realm using oauth2-introspection, the system...

PT-2026-95425

Name of the Vulnerable Software and Affected Versions µD3TN version 0.15.0 Description An integer overflow occurs during the TCPCLv3 handshake, which subsequently leads to a heap overflow. This allows remote attackers to reliably cause a Denial of Service DoS, a condition where the system becomes...

PT-2026-95601

Name of the Vulnerable Software and Affected Versions osmo-iuh versions 0.1.0 through 1.8.0 Description A reachable assertion in the ranap handle co dt function can be triggered by an arbitrarily sized NAS-PDU Network Access Stratum Protocol Data Unit, which is a unit of data used for signaling...

PT-2026-100124

Security vulnerability affects the airflow-3 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95404

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics versions 12.0.4 through 12.0.4 FP2 IBM Cognos Analytics versions 12.1.0 through 12.1.3 FP1 Description A failure to properly enable HTTP Strict Transport Security HSTS, a security mechanism that forces browsers to...

PT-2026-95275

Name of the Vulnerable Software and Affected Versions Filter Gallery versions prior to 1.1.5 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated attackers with subscriber-level access or higher c...

PT-2026-95314

Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager DSM versions prior to 7.2.1-69057-12 Synology DiskStation Manager DSM versions prior to 7.2.2-72806-9 Synology DiskStation Manager DSM versions prior to 7.3.2-86009-4 Synology DiskStation Manager DSM versions prior...

PT-2026-101502

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95438

Name of the Vulnerable Software and Affected Versions IBM QRadar versions 7.5.0 through 7.5.0 UP15 Interim Fix 006 Description An authenticated user can obtain sensitive information from backup files because of incorrect permissions assignment. Recommendations Update IBM QRadar versions 7.5.0...

PT-2026-95512

Name of the Vulnerable Software and Affected Versions zot versions prior to 2.1.18 Description A flaw in the bearer authentication handler allows a remote attacker with a token limited to pull and push actions to delete manifests and blobs within the token's repository scope. This occurs because...

PT-2026-95435

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Data version 5.1.2 Description A remote attacker can perform directory traversal on the system by sending a specially crafted URL request containing "dot dot" sequences /../. This allows the attacker to view arbitrary files o...

PT-2026-95281

Name of the Vulnerable Software and Affected Versions WP Easy Pay – Payment and Donation form Builder for Square versions prior to 4.5.1 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated...

PT-2026-95600

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server 9.0 IBM WebSphere Application Server 8.5 Description Log injection is possible through the use of crafted LTPA Lightweight Third-Party Authentication token cookies. This allows an attacker to insert malicious...

PT-2026-95266

Name of the Vulnerable Software and Affected Versions Auto Upload Images versions prior to 3.3.3 Description This issue is a Limited Server-Side Request Forgery SSRF, a flaw that allows a server to be coerced into making requests to an unintended location. Authenticated attackers with...

PT-2026-95663

Name of the Vulnerable Software and Affected Versions CordysCRM versions prior to 1.7.4 Description An authenticated user with CLUE MANAGEMENT POOL:READ or CUSTOMER MANAGEMENT POOL:READ permissions can access leads or accounts belonging to other users, departments, or organizations. This occurs...

PT-2026-101899

Security vulnerability affects the redis package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102268

Security vulnerability affects the airflow-3 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102157

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100230

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100299

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95626

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A remote unauthenticated attacker can execute arbitrary code on the system. This occurs due to the deserialization of untrusted data, which allows a network attacker who can reach the...