PT-2026-95483

Name of the Vulnerable Software and Affected Versions Mealie versions prior to 3.21.0 Description Authenticated attackers can access private recipe identifiers, rating values, and favorite flags of other users across different groups or households. This occurs because the application fails to...

PT-2026-100778

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101279

Security vulnerability affects the redis package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101677

Security vulnerability affects the busybox package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100298

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100195

Security vulnerability affects the runc package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95446

Name of the Vulnerable Software and Affected Versions IBM MQ Console affected versions not specified Description Improper authorization checks in the IBM MQ Console allow authenticated users without administrative privileges to create and start queue managers. A queue manager is a central compone...

PT-2026-101665

ghsa-2vrm-gr82-f7m5 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101659

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95668

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper privilege management allows a local attacker to gain elevated privileges. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2026-101733

Security vulnerability affects the perl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102033

Security vulnerability affects the expat package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95193

Name of the Vulnerable Software and Affected Versions NASA CryptoLib version 1.5.0 Description An authentication downgrade issue exists in the Telecommand TC receive path. The receiver selects the Security Association SA used for Space Data Link Security SDLS processing based only on the SPI fiel...

PT-2026-100081

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95680

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper authorization in the system allows a remote authenticated attacker to bypass security restrictions due to improper access control. Recommendations At the moment, there is no...

PT-2026-101500

Security vulnerability affects the redis package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100415

Security vulnerability affects the redis package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100235

Security vulnerability affects the k8s-sidecar package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95679

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet...

PT-2026-100706

Security vulnerability affects the logstash-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95316

Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager DSM versions prior to 7.2.1-69057-12 Synology DiskStation Manager DSM versions prior to 7.2.2-72806-9 Synology DiskStation Manager DSM versions prior to 7.3.2-86009-4 Synology DiskStation Manager DSM versions prior...

PT-2026-102160

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102185

Security vulnerability affects the py3-urllib3 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100357

Security vulnerability affects the tigera-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95520

Name of the Vulnerable Software and Affected Versions Mongoid affected versions not specified Description An unsafe reflection weakness exists in the document persistence layer of the object-document mapping code. When an embedding application passes keys from an unauthenticated party, it can lea...

PT-2026-101739

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95507

Grandstream GWN7660ELR before firmware version 1.0.27.6 contains an information disclosure vulnerability that allows unauthenticated remote attackers to obtain sensitive system information by querying the SNMP v2c service configured with the default community string 'public'. Attackers can query...

PT-2026-95312

Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager versions prior to 7.2.1-69057-12 Synology DiskStation Manager versions prior to 7.2.2-72806-9 Synology DiskStation Manager versions prior to 7.3.2-86009-4 Synology DiskStation Manager versions prior to 7.4-90075...

PT-2026-101645

ghsa-7g45-4rm6-3mm3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95558

Name of the Vulnerable Software and Affected Versions Mongoid affected versions not specified Description The query builder fails to neutralize string-typed query criteria, passing them directly to the database as server-side JavaScript expressions. An unauthenticated party capable of influencing...

PT-2026-95550

Name of the Vulnerable Software and Affected Versions Kyoo versions prior to 5.1.0 Description An unauthenticated attacker can initiate an OpenID Connect OIDC login flow using a controlled redirectUrl. The system stores this URL within the login state, and the endpoint '/auth/oidc/logged/provider...

PT-2026-95479

Name of the Vulnerable Software and Affected Versions CareCam CM2507 affected versions not specified Description An insufficiently protected network maintenance mechanism allows for the activation of a remote debugging service. An attacker located on the same local network who meets specific devi...

PT-2026-95298

Name of the Vulnerable Software and Affected Versions The Newsletter – Send awesome emails from WordPress versions prior to 9.3.9 Description Reflected Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary web script...

PT-2026-100358

Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100588

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101936

Security vulnerability affects the spark-sc213-jdk17-py312 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100376

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95586

Name of the Vulnerable Software and Affected Versions cockpit-machines affected versions not specified Description A flaw in the cockpit-machines component allows a local attacker to expose sensitive Virtual Machine VM credentials, including plaintext passwords. This occurs because the component...

PT-2026-100100

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95460

Name of the Vulnerable Software and Affected Versions gedelumbung HospitalManagement versions up to c2d45543789a3887067d3915f69d44cfc2cf76a8 Description Improper authentication occurs in the Password Change Handler component due to the manipulation of the kode user or username arguments. This iss...

PT-2026-101081

ghsa-fmxf-pm6p-7xgm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100490

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101725

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100641

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101745

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95285

Name of the Vulnerable Software and Affected Versions Kubio AI Page Builder versions prior to 2.8.5 Description Stored Cross-Site Scripting occurs via the kubio/copyright Block Content due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level acces...

PT-2026-95448

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated data...

PT-2026-100193

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102105

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95720

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.5 Description The software renders notebook names as raw HTML in the Daily Note picker dialog without proper escaping. This leads to stored cross-site scripting XSS within the Electron renderer. An attacker can...