PT-2026-80911

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities...

PT-2026-80912

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities...

PT-2026-80987

Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in label studio/tasks/api.py declares queryset = Annotation.objects.all and provides no get queryset override, so the default lookup retrieves any annotation by primary key. The view's...

PT-2026-80989

D-Link DI-7001 MINI 5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of msp info, which can be exploited to run arbitrary commands...

PT-2026-80910

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities...

PT-2026-80969

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. The vulnerability is caused by repeated string concatenation of the pathN, valueN, key, and option fields into fixed-size stack buffers without total length checks. A remote attacker can...

PT-2026-80962

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the fdftDevice function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execu...

PT-2026-80952

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the webBackupAction function. The vulnerability is caused by insufficient filtering of the option, key, pw encode, pathN, and valueN fields before command execution. A remote attacker can trigger this vulnerability v...

PT-2026-80942

Multiple DrayTek VigorAP models contain a command injection vulnerability in the mesh start speed test function. The vulnerability is caused by insufficient sanitization of the meshdevice index and meshdevice ip fields before command execution. A remote attacker can trigger this vulnerability via...

PT-2026-80965

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the tftp upgrade function. The vulnerability is caused by insufficient filtering before the filename field is concatenated into a command. A remote attacker can trigger this vulnerability via crafted input to execute...

PT-2026-80971

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the poe schedule profile function. The vulnerability is caused by repeated concatenation of the start date, start time, duration time, how often, weekdays, monthly date, and cycle duration fields into small fixed-size...

PT-2026-80946

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker can trigger this vulnerability via crafted input, causing a denial of...

PT-2026-80964

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setTime function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

PT-2026-80914

NetworkManager did not apply the private user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise 802.1X connection profile's CA path at an...

PT-2026-80928

Improper input validation vulnerability in Apache Camel Atmosphere Websocket component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-atmosphere-websocket producer selects which connected WebSocket peers a message is...

PT-2026-80876

CVE-2026-03200 Patch https://t.co/GJbDUhmu7V Customizable Vulnerability Alerts: https://t.co/U7998fz7yk...

PT-2026-80867

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption...

PT-2026-80864

RansomLook contains an authorization flaw in its legacy database export functionality that can allow unauthenticated remote users to retrieve information intended to remain private. The /export/ endpoint permits selected internal databases to be exported without requiring authentication. While...

PT-2026-80852

The Mercado Pago Node.js SDK interpolates caller-supplied identifiers into API request paths without percent-encoding them, so characters that are structural in a URL survive into the outgoing request. The payment get, capture, cancel, paymentRefund create, total, list, get, advancedPayment get,...

PT-2026-80880

HCL Hive is affected by a missing rate limit which could allow an attacker unauthorized access via brute-force or credential stuffing attacks, or cause a denial of service...

PT-2026-80851

Xinference loads models with Hugging Face remote code execution unconditionally enabled, and before version 2.12.0 exposes no setting to disable it. Six loader call sites pass trust remote code=True as a literal or as an unconditional default: RerankModel. get tokenizer in...

PT-2026-80862

Authorization Bypass Through User-Controlled Key in the supplier API in Roskus Prospero Flow CRM 4.0.0 through 5.3.1 allows any authenticated user to read and modify another company's supplier record, and to reassign it to their own company, via a PUT request to /api/supplier/id setting company i...

PT-2026-80856

act starts an HTTP Artifacts V4 backend whenever a workflow uses actions/upload-artifact@v4 or actions/download-artifact@v4. The control-plane RPCs of that backend, including CreateArtifact, GetSignedArtifactURL, ListArtifacts, FinalizeArtifact and DeleteArtifact, accept a caller-supplied workflo...

PT-2026-80894

RansomLook contains an authorization weakness in the web-based configuration editor exposed through the /admin/config endpoint. The endpoint requires an authenticated session but does not perform an explicit privilege or administrator authorization check before allowing access to...

PT-2026-80848

HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached...

PT-2026-80849

HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments...

PT-2026-80873

CVE-2025-38900 Patch https://t.co/kTgNYMcFaj Don't wait vulnerability scanning results: https://t.co/oh1APvMMnd...

PT-2026-80879

An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert containing a controlled generatorURL. The attacker is authorized to create the alert, but not to execute script in another user's Grafana session. Grafana renders...

PT-2026-80806

Unauthenticated Cross Site Scripting XSS in WPComplete = 2.9.5.6 versions...

PT-2026-80804

Unrestricted Upload of File with Dangerous Type in the company logo upload in Roskus Prospero Flow CRM before 5.15.13 allows an authenticated user holding the create company and update company permissions to execute arbitrary JavaScript in the application origin via an SVG document containing an...

PT-2026-80195

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

PT-2026-80844

Unauthenticated Local File Inclusion in Verdure Core = 1.2 versions...

PT-2026-80801

Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...

PT-2026-80815

Unauthenticated Cross Site Request Forgery CSRF in Fluent Support Pro = 2.3.1 versions...

PT-2026-80836

Unauthenticated SQL Injection in Woo Essential = 4.3.0 versions...

PT-2026-80830

Unauthenticated Arbitrary File Deletion in WooCommerce File Approval = 10.7 versions...

PT-2026-80827

Unauthenticated Privilege Escalation in Digits = 9.2 versions...

PT-2026-80803

A flaw was found in JSS Java Security Services. The JSSTrustManager class does not verify NSS trust flags when validating CA certificates, allowing certificates present in the NSS database without TRUSTED CA flags to be accepted as trust anchors for TLS connections. In non-default configurations...

PT-2026-80809

Unauthenticated Broken Access Control in Booking and Rental Manager = 2.7.5 versions...

PT-2026-80823

Unauthenticated Local File Inclusion in Tonda 2.6 versions...

PT-2026-80812

Subscriber Broken Access Control in Fluent Support Pro = 2.3.1 versions...

PT-2026-79842

authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, an inbound SAML Source configured with the non-default USERNAME LINK or EMAIL LINK user-matching mode interprets an XML comment in a NameID differently from the identity provider's signed assertion. An attacker with an...

PT-2026-80788

fast-uri is a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not validate the complete IPv6 grammar, so invalid trailing text in an authority can be silently discarded and a malformed attacker-controlled host is turned into a different valid IPv6 destination. For...

PT-2026-80796

Hugo's default fenced-code-block renderer writes attribute values taken from the code-fence info string into the rendered HTML without escaping them. New in markup/internal/attributes/attributes.go converts every attribute value from a byte slice to a string as it is stored, deliberately dropping...

PT-2026-79843

authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, the Remote Access Control endpoint list returns every configured endpoint to any authenticated user regardless of which applications the user may access, and the response includes connection settings that can contain...

PT-2026-80002

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's RESTORE command accepts a malformed RDB stream payload that assigns one Pending Entry List NACK to multiple consumers during stream consumer-group deserialization, causing a use-after-free when...

PT-2026-80813

Subscriber Server Side Request Forgery SSRF in FluentCRM Pro = 3.1.12 versions...

PT-2026-80900

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...

PT-2026-80938

Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. The vulnerability is caused by insufficient filtering of dangerous characters before the event code field is concatenated into a system command. A remote attacker can trigger this...

PT-2026-80943

Multiple DrayTek VigorAP models contain a command injection vulnerability in the InquierTime function. The vulnerability is caused by insufficient filtering of the time field before command execution. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary commands...