PT-2026-121558

Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains a denial of service vulnerability in the wasmtime-wasi WASI preview 0 poll oneoff adapter, which performs On host work per subscription without consuming or checking fuel. Malicious guest modules can pass many...

PT-2026-121559

Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an unbounded memory allocation in the wasmtime-wasi WASIp2 write-zeroes method of SinkOutputStream, the default stream used when stdout/stderr are not configured. A malicious WebAssembly guest can request huge...

PT-2026-121667

Name of the Vulnerable Software and Affected Versions Azure Pipelines affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized attacker to execute code over a network. Recommendations At the momen...

PT-2026-121355

YouDataSum CPAS Audit Management System V4 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the fileId parameter. Attackers can send GET requests to /cpasm4/plugInManController/downPlugs with ../ sequences in fileId to retrieve...

PT-2026-121268

The PixelYourSite WordPress plugin before 11.4.3, PixelYourSite Pro WordPress plugin before 12.6.8 do not sanitise and escape a cookie value before printing it into the page output, which, on a site running a full-page cache, allows unauthenticated attackers to store a Cross-Site Scripting payloa...

PT-2026-121407

OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device management. Prior to 1.2.1, Html::commandButton in lib/Html.class.php embeds an action URL containing a stored computer hostname into a JavaScript string in an inline onclick...

PT-2026-121392

Name of the Vulnerable Software and Affected Versions Connect SDK versions prior to 4.3.2 Flex SDK versions prior to 3.7.8 Description A flaw exists where a message containing invalid security settings can bypass authentication, potentially leading to network disruption. This issue does not allow...

PT-2026-121394

Name of the Vulnerable Software and Affected Versions EmberZNet versions prior to 9.1.2 Description A malformed Publish Billing Period command can trigger a recursive function call that fails to reach its end condition, leading to a system hang or crash. This issue specifically affects devices th...

PT-2026-121581

Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in CreateConversationalHeader in pkg/notifications/mail.go that interpolates display names and task and project titles raw into email anchors. Authenticated users can craft titles or display names that close the anchor and inject...

PT-2026-120840

Missing Authentication for Critical Function CWE-306 and Insufficiently Protected Credentials CWE-522 in the control plane enrollment status handler HandleEnrollStatus at GET /enroll/status in internal/controlplane/server.go in Google OSS Agent Mesh SAM versions 0.1.0-alpha.1 through 0.1.0-alpha....

PT-2026-120910

Swiper is mobile first, layout and gestures wise, it provides great amount of options for designing your own widget and related events. This module provides a route for displaying published content entities in a dialog. The route does not sufficiently verify the current user's access to the...

PT-2026-120170

FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP servers to read beyond surface buffers by supplying unvalidated mappedWidth and mappedHeight values. Attackers can send a crafted RDPGFX MAP SURFACE TO WINDOW PDU with oversized...

PT-2026-120877

A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers to retrieve the plaintext TP-Link ID account password. Successful exploitation may allow attackers to compromise the associated cloud account and perform unauthorized actions on...

PT-2026-120495

A flaw was found in the lm-evaluation-harness component of Red Hat OpenShift AI. An authenticated user, able to submit an evaluation job, could exploit this by providing a malicious model URL in the JobSpec. This vulnerability allows for the disclosure of the tenant's model authentication secret ...

PT-2026-120564

Interpretation conflict in the HTTP protocol implementation in Apache bRPC version 1.18.0 on all platforms allows remote attackers to bypass access control rules enforced by a front proxy. Root Cause: The method dispatch function FindMethodPropertyByURI in bRPC's HTTP protocol splits the request...

PT-2026-120505

The HappyForms WordPress plugin before 1.26.15 does not sanitise or escape a user-controlled referral value before embedding it in the form notification email, allowing unauthenticated attackers to inject arbitrary HTML into the emails site administrators receive...

PT-2026-120794

A flaw has been found in HarnessRouter up to 0.31.12. This impacts an unknown function of the file gateway/app.py of the component Targets Test Endpoint. Executing a manipulation of the argument base url can lead to server-side request forgery. The attack may be performed from remote. Upgrading t...

PT-2026-120621

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.This issue affects Geo Mashup: from n/a through 1.13.22...

PT-2026-120883

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated user to access paid AI features without a valid subscription due to insufficient server-side...

PT-2026-120529

Uncontrolled recursion in the Redis reply parser in Apache bRPC 1.18.0 allows a remote Redis server peer to crash a bRPC Redis client process by returning a deeply nested RESP array reply. The parser recursed once for each nested array level without enforcing a depth limit. The fix adds a...

PT-2026-120904

This module enables you to upload CSV files to a field and display them as an interactive, sortable and searchable table. The module doesn't sufficiently escape CSV cell and header values before passing them to the DataTables library, leading to a potential cross-site scripting vulnerability. Thi...

PT-2026-122477

Уязвимость микропрограммного обеспечения шлюза Cisco Expressway связана с неконтролируемым достижимым утверждением. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

PT-2026-120809

Name of the Vulnerable Software and Affected Versions Algorithm::UrataniTakeda versions 0.1.5 through 0.1.6 Description An issue exists where memory exhaustion can occur due to a failure shift cache in the search process that is never cleared. The failure shift is cached for each pair of trie sta...

PT-2026-120526

A vulnerability was identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected is the function mysqli query of the file /Admin/View/editPlan.php. Such manipulation of the argument Plan no/Name leads to sql...

PT-2026-120570

The MySQL client response parser in Apache bRPC dereferences a null pointer when the server peer sends a zero-payload-length response packet. A response packet whose declared payload length is zero is accepted by the frame-length check is full package, after which the parser reads the response ty...

PT-2026-120573

Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool calls limit on nested tool calls dispatched from run code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run nested call without check before tool call, exceeding operato...

PT-2026-120898

This module enables you to use ffmpeg for image conversion The module doesn't sufficiently sanitize file names passed to the ffmpeg cli tool. This vulnerability is mitigated by the fact that an attacker must be able to upload images on the site...

PT-2026-122473

Уязвимость системы обнаружения вторжений Snort связана с недостатками процедуры аутентификации. Эксплуатация уязвимости может позволить нарушителю выполнить произвольные команды...

PT-2026-120687

Name of the Vulnerable Software and Affected Versions Snort 3 affected versions not specified Description Improper privilege management issues exist within the software, which may allow for unauthorized elevation of privileges. Recommendations At the moment, there is no information about a newer...

PT-2026-120747

@EigenGender Fixed: CVE-2026-0004: Change secret key to 3. They'll never think to try this one...

PT-2026-120836

Name of the Vulnerable Software and Affected Versions TOTOLINK EX200 version 5.2.3c.7200 Description A stack-based buffer overflow exists in the setStaticDhcpConfig function within the /cgi-bin/cstecgi.cgi endpoint of the lan.so component. This issue allows a remote attacker to trigger the flaw b...

PT-2026-120647

The webhook platform gateway in Nous Research Hermes Agent versions builds the session chat id as webhook:route name:delivery id and re-derives the authorizing route by splitting that string, so a route name containing a ":" resolves toolset authorization to a different, higher-privileged prefix...

PT-2026-120719

A vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. This issue affects the function index/store/update/destroy of the file app/Http/Controllers/FileController.php of the component Files API. The manipulation of the argument Request results in...

PT-2026-120574

Shopper from 2.0.0 before 2.6.0 contains a missing authorization vulnerability that allows admin-panel users holding only access dashboard to create administrators and grant permissions. Attackers can call CreateTeamMember::store or Permissions::togglePermission directly over /livewire/update to...

PT-2026-120739

A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The impacted element is an unknown function of the file edit member.php. Performing a manipulation of the argument firstname/middlename/lastname/address/branch/type results in sql injection. Remote...

PT-2026-122480

Уязвимость микропрограммного обеспечения шлюза Cisco Expressway связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...

PT-2026-120764

Not to miss out on all the fun, musl also has a remote-code execution bug CVE-2026-107891. C was a mistake...

PT-2026-120816

Name of the Vulnerable Software and Affected Versions EKKOLearnAI ekko-studio versions prior to 1.0.7 Description A flaw in the Media Generation API component allows remote exploitation via file inclusion. The issue exists within the saveGeneratedImages function located in the...

PT-2026-120199

Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes resolved environment secret values in debug deployment logs by serializing unredacted envVars. Attackers with access to terminal transcripts, CI debug logs, or support bundles can read the Starting...

PT-2026-120896

Sector is a distribution targeted towards Drupal site builders and site owners who are looking for a fully configured Drupal project out of the box. A module specific to this distribution doesn't sufficiently sanitize media names, potentially leading to an XSS exploit. This vulnerability is...

PT-2026-120912

This module allows granting access to unpublished nodes per content type. For nodes with at least one unpublished translation, the module grants every user with the "access content" permission view access to the published translations of that node. This overrides the restrictions of other node...

PT-2026-120476

In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers authorize operations against the caller's own project context, then load a foreign public share without re-authorizing against the share's actual...

PT-2026-120653

Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to modify a custom role that accounts in other domains hold, and to create custom roles and delete any tha...

PT-2026-120457

The SmartyParcel WordPress plugin before 1.23.4 does not perform authorisation checks when deleting shipping label records, allowing any authenticated user such as a subscriber to delete the shipping label and tracking records of arbitrary orders store-wide...

PT-2026-120454

The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not verify that the acting user is permitted to manage the targeted accounts before changing their verification state, allowing a subsite administrator on a multisite network to mark arbitrary network users outside their own sit...

PT-2026-120460

The SureCart WordPress plugin before 4.9.5 does not restrict which related objects an anonymous visitor may include when reading a single upsell funnel through its REST API, nor strip private fields from those objects, allowing unauthenticated users to read merchant-private catalog data such as...

PT-2026-120690

Name of the Vulnerable Software and Affected Versions Cisco products affected versions not specified Description A flaw in the Snort 3 Detection Engine allows an unauthenticated remote attacker to cause a denial of service DoS condition. The issue occurs during the processing of General Packet...

PT-2026-120847

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.4 Splunk Enterprise versions prior to 10.2.8 Splunk Enterprise versions prior to 10.0.11 Splunk Enterprise versions prior to 9.4.16 Description A user without admin or power roles can cause a denial of...

PT-2026-120852

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.4 Splunk Enterprise versions prior to 10.2.8 Splunk Enterprise versions prior to 10.0.11 Splunk Enterprise versions prior to 9.4.16 Description A user without admin or power roles can move field...

PT-2026-120924

Rabbit Hole lets site builders control what happens when an entity's page is viewed: show it, return an access denied or not found response, or redirect the visitor to another URL. The module has two vulnerabilities. Rabbit Hole behavior can be skipped with a specific query parameter. In these...