PT-2026-99307

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.4 Description A path traversal issue exists in the 'exportBrowserHTML' endpoint. Authenticated administrators can use directory traversal sequences in the folder parameter to write arbitrary HTML content to an...

PT-2026-99194

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description An authorization bypass exists in the skill tool dispatch mechanism that fails to properly verify the owner status of the sender. This allows non-owner users who are authorized to invoke skill...

PT-2026-99245

Name of the Vulnerable Software and Affected Versions File Manager WordPress plugin versions prior to 8.0.5 FileOrganizer WordPress plugin versions prior to 1.2.1 File Manager Pro WordPress plugin versions prior to 2.1.3 Description These plugins fail to correctly validate the origin of window...

PT-2026-99366

Name of the Vulnerable Software and Affected Versions Adminer versions prior to 6.0.2 Description An issue exists where the result of the CONNECTION ID database function is interpolated into JavaScript without proper escaping. This allows a malicious database server to execute arbitrary JavaScrip...

PT-2026-99247

Name of the Vulnerable Software and Affected Versions WP Delicious WordPress plugin versions prior to 1.10.8 Description Insufficient validation and escaping of HTML tag names derived from user-supplied recipe block data allows users with the Contributor role and above to inject arbitrary HTML...

PT-2026-99242

Name of the Vulnerable Software and Affected Versions wp-review-slider-pro versions prior to 12.7.12 Description An issue exists where an AJAX handler fails to perform a capability check. Because the nonce protecting this handler is generated for every visitor, any authenticated user, including...

PT-2026-99298

Name of the Vulnerable Software and Affected Versions Capgo Cap-go/capgo.app server backend affected versions not specified Description An incorrect authorization flaw exists in the API-key bundle promotion path. The 'PUT /bundle' endpoint, accessible to all and write API keys, utilizes the...

PT-2026-99203

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.4.5 through 2026.8.0 Description The Gateway validates a single DNS resolution result for a configured remote Chrome DevTools Protocol CDP hostname, but the raw WebSocket and Playwright transports perform a subsequent,...

PT-2026-99294

🚨 CVE-2026-100623 Capgo capgo.app exposes the legacy membership table public.org users directly through Supabase PostgREST. The table's row-level security policies "Allow org admin to insert" and "Allow org admin to update" only verify that the caller has admin rights in the target organization...

PT-2026-99186

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description An issue exists in the QQBot voice attachment handling where filenames are decoded twice. This double decoding allows encoded traversal segments to reappear after the sanitization process, enabli...

PT-2026-99290

Name of the Vulnerable Software and Affected Versions Capgo capgo.app affected versions not specified Description An indirect bypass of the row-level security policy exists in the public.manifest table. A user or principal with app-scoped upload, write, or all API keys, or an authenticated user...

PT-2026-99382

Name of the Vulnerable Software and Affected Versions froxlor versions prior to 2.3.12 Description The software fails to invalidate existing panel sessions, API keys, and 2FA trust cookies when a user password is changed. This allows attackers who possess hijacked sessions, valid API keys, or 2FA...

PT-2026-99172

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.4.5 through 2026.8.0 Description When session-derived text is persisted to session memory, the software may lose the restrictions and untrusted provenance of the originating requester. In deployments with session-memory...

PT-2026-99252

Name of the Vulnerable Software and Affected Versions The Testimonials Widget WordPress plugin versions prior to 4.0.5 Description The plugin fails to perform capability or ownership checks when processing the front-end testimonial submission form. This allows unauthenticated users to create...

PT-2026-99292

Name of the Vulnerable Software and Affected Versions Capgo capgo.app affected versions not specified Description An incomplete access-control and content-lock enforcement issue exists where the enforce encrypted bundle trigger and check encrypted bundle on insert locks exempt rows in app version...

PT-2026-99228

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.4.10 through 2026.7.0 Description Persistent memory dreaming mutations omit owner permission checks. An authorized but non-owner external-channel sender can issue the '/dreaming on' and '/dreaming off' commands to enable...

PT-2026-99305

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.4 Description The Electron main process in app/electron/main.js fails to validate the sender or restrict recipients within the 'siyuan-send-windows' IPC handler. The handler ignores the event.sender and forwards an...

PT-2026-99380

Name of the Vulnerable Software and Affected Versions Froxlor versions prior to 2.3.12 Description The software stores only a numeric user ID in remembered-2FA tokens within panel 2fa tokens without recording the account namespace. During login, the remembered-token lookup is not constrained to t...

PT-2026-99217

Name of the Vulnerable Software and Affected Versions OpenClaw for iOS versions prior to 2026.8.11 Description The application stores Gateway credentials as cleartext JSON within App Group UserDefaults rather than using the secure device Keychain. This allows attackers who obtain unencrypted devi...

PT-2026-99240

Name of the Vulnerable Software and Affected Versions WP Directory Kit WordPress plugin versions prior to 1.5.8 Description Insufficient sanitization and escaping of category and location fields before they are output in page attributes allows users with a listing-management role to perform Store...

PT-2026-99423

🚨 OpenCTI Authorization Flaw in Case Creation CVE-2026-76822 Critical Vulnerability Alert! OpenCTI is affected by CVE-2026-76822. 🔍 Identify Targets via ZoomEye: Search Dork: app="OpenCTI" Exposure: 1k instances identified globally. ZoomEye Search Link: 👉 https://t.co/C5U4m6Ej5b Infosec...

PT-2026-99733

CVE-2026-53972 - Rejected reason: This CVE ID has been rejected or CVE ID :CVE-2026-53972 Published : Sept. 25, 2026, 10:17 p.m. | 3 hours, 8 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for...

PT-2026-99224

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.7.1 Description The software fails to enforce the administrator scope requirement for browser control when accessed via the node.invoke method, despite direct browser.request access requiring such scope. In...

PT-2026-99212

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description An issue exists in browser wait predicates that allows attackers to bypass server-side request forgery SSRF protections. By using the wait --fn function against an existing browser session, an...

PT-2026-99735

CVE-2026-7799 - Rejected reason: This CVE ID has been rejected or CVE ID :CVE-2026-7799 Published : Sept. 25, 2026, 10:18 p.m. | 3 hours, 6 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for mo...

PT-2026-99313

Name of the Vulnerable Software and Affected Versions SiYuan versions 2.1.0 through 3.8.3 Description A cross-site request forgery issue exists in the CheckAuth lock-screen pass-through branch. The system grants administrator access to loopback requests without validating Origin headers, which ar...

PT-2026-99197

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description An authorization bypass exists on macOS and Linux where Allow Always approvals for exact commands are persisted as path-only grants. This allows an attacker to reuse the same executable with...

PT-2026-99319

Name of the Vulnerable Software and Affected Versions vllm versions prior to 0.29.0 Description The software fails to enforce the VLLM MAX AUDIO CLIP FILESIZE MB limit during multimodal chat audio decoding. This allows unauthenticated clients to bypass file size restrictions by submitting oversiz...

PT-2026-99196

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description A command parser issue exists where escaped newlines interfere with the parsing of the exec allowlist. This allows attackers to craft input containing escaped newlines to bypass allowlist...

PT-2026-99320

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.29.0 Description A resource-limit bypass exists in the PyNvVideoCodec decoder allocation. This issue occurs because sampler subclass shadowing allows independent counter increments. Unauthenticated attackers can select...

PT-2026-99550

Name of the Vulnerable Software and Affected Versions Citrix NetScaler ADC versions prior to 14.1-73.37 Citrix NetScaler ADC versions prior to 13.1-64.23 Citrix NetScaler ADC versions prior to 14.1-73.37 FIPS Citrix NetScaler ADC versions prior to 13.1.37.279 FIPS and NDcPP Citrix NetScaler Gatew...

PT-2026-99166

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description An authorization scope widening issue exists in file-transfer allow-always approvals. This allows attackers to reuse standing grants for unreviewed paths by exploiting glob metacharacter...

PT-2026-99364

Name of the Vulnerable Software and Affected Versions Hugo versions 0.162.0 through 0.165.0 Description A case-sensitive validation flaw exists in the security.http.urls IP-literal deny rule. This allows attackers to bypass restrictions by using mixed-case URL schemes in resources.GetRemote calls...

PT-2026-99354

Name of the Vulnerable Software and Affected Versions Budibase @budibase/server versions prior to 3.45.0 Description An issue exists in the way MySQL and MSSQL column-rename DDL is constructed in packages/backend-core/src/sql/sqlTable.ts. The software interpolates identifiers directly into a raw...

PT-2026-99204

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description Insufficient access restrictions to operator command cron jobs allow model-visible agent callers to read and execute ownerless command jobs. This allows attackers to inspect stored environment...

PT-2026-99374

Name of the Vulnerable Software and Affected Versions Kyverno versions 1.16.0 through 1.19.0 Description The software registers the globalcontext.Lib Common Expression Language CEL library in its policy environment without restricting it to the policy's namespace. This differs from other librarie...

PT-2026-99424

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An authorization bypass exists where an authenticated user with Timeline feature privileges in a Kibana space can access draft Timeline objects belonging to other users within the same space...

PT-2026-99377

Name of the Vulnerable Software and Affected Versions kyverno versions prior to 1.19.1 Description Insufficient validation of URL-encoded path segments in the Policy apiCall urlPath allows namespace tenants to bypass the per-namespace clamp. This enables the creation of objects in other namespace...

PT-2026-99428

Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Uncontrolled Resource Consumption in Elasticsearch can lead to a denial of service through excessive allocation, which occurs when a system allocates more memory or resources than...

PT-2026-99375

Name of the Vulnerable Software and Affected Versions Kyverno versions 1.14.0 through 1.19.0 Description The ImageValidatingPolicy evaluator fails to process the spec.images and spec.allowedValues fields within a PolicyException. When a PolicyException matches a resource via policyRefs and...

PT-2026-99426

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An authorization flaw allows an authenticated user with Synthetics privileges limited to a single Kibana space to permanently delete Synthetics monitors shared into spaces they are not...

PT-2026-99376

Name of the Vulnerable Software and Affected Versions Kyverno versions prior to 1.19.1 Description An issue exists where the legacy apiCall service executor pkg/engine/apicall/executor.go and the GlobalContextEntry external-API path do not apply the default egress blocklist or scoped-token...

PT-2026-99653

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.57 Description A use after free issue exists in the Updater component on Mac. This occurs when the system attempts to use a memory location after it has been freed, which can be triggered by a remote...

PT-2026-99429

Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Uncontrolled Resource Consumption in Elasticsearch can lead to a denial of service through excessive allocation. This occurs when the system fails to limit the amount of resources...

PT-2026-99193

Name of the Vulnerable Software and Affected Versions openclaw versions 2026.5.2 through 2026.8.0 Description An incorrect authorization issue exists in WhatsApp group handling. A group sender who is permitted to send ordinary messages but is restricted by commands.allowFrom or owner command...

PT-2026-98926

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 3.13.0 through 3.13.18 RabbitMQ versions 4.0.x prior to 4.0.24 RabbitMQ versions 4.1.x prior to 4.1.15 RabbitMQ versions 4.2.x prior to 4.2.10 RabbitMQ versions 4.3.x prior to 4.3.5 Description RabbitMQ Management renders an...

PT-2026-98925

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 3.13.0 through 3.13.18 RabbitMQ versions 4.0.x through 4.0.23 RabbitMQ versions 4.1.x through 4.1.14 RabbitMQ versions 4.2.x through 4.2.9 RabbitMQ versions 4.3.x through 4.3.4 Description An issue exists where OAuth credenti...

PT-2026-98729

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Fix potential double-free at error path The fix for caiaq driver's resource management to handle the errors tries to release the resources in a common destructor call, but as a sashiko review for another patch...

PT-2026-98546

In the Linux kernel, the following vulnerability has been resolved: fs: autofs: fix memory leak in autofs fill super In autofs fill super, we create a new inode using autofs new ino, however, if we fail to create root inode, that is, root inode failure path, we return -ENOMEM without freeing the...

PT-2026-98460

Name of the Vulnerable Software and Affected Versions Regesta Smart HD-PLC - TLDPH16D2 version 11.02.06.00.02 Description A network attacker with registration access can perform Cross-Site Scripting XSS by injecting a specific payload via the cmdcookie parameter within the '/upgrade/index.html'...