PT-2026-98810

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/gud component where the driver fails to validate if GUD ROTATION 0 is present in the supported rotations bitmask. When the drm plane create rotation property...

PT-2026-98813

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where a register invariants violation occurs during speculative pointer arithmetic. When processing instructions in adjust ptr...

PT-2026-98818

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.8 and 6.18 LTS Description An issue exists in the drm/virtio component where the virtio-gpu driver fails to correctly use the DMA API for resource backing on Xen PV domains. In these domains, page addresses do not...

PT-2026-98827

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter module where the nf nat sip component fails to correctly adjust the offset when Network Address Translation NAT changes the packet length. Specifically,...

PT-2026-98917

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 4.1.0 through 4.1.10 RabbitMQ versions 4.2.0 through 4.2.8 RabbitMQ versions 4.3.0 through 4.3.2 Description An authenticated low-privileged management user with vhost access can cause a denial of service on a memory-limited...

PT-2026-98941

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.0.2 Description In the inbound PGP email processing, the return value of the gpg verification call is silently discarded. The handler unconditionally marks the security preferences of the article as having a successf...

PT-2026-98977

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to access CI/CD variables outside their intended environment scope due to improper input...

PT-2026-98982

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user could have induced a targeted user to perform unintended state-changing HTTP requests due to improper...

PT-2026-98988

GitLab has remediated an issue in GitLab EE affecting all versions from 12.3 to 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 under certain conditions could allow an authenticated user to achieve remote code execution by importing a specially crafted Git project export to overflow the Unicod...

PT-2026-98991

JupyterLab versions =4.6.0,=4.6.1 and =4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensionManager.install. A missing 'await' caused the is install allowed coroutine to never execute, so the extension allowlist/blocklist check was not enforced for direct callers of install. The...

PT-2026-99002

NGINX Plus and NGINX Open Source have a vulnerability in the ngx http v3 module module. When using HTTP/3 with OpenSSL versions = OpenSSL 3.5.0 under certain configurations, a limited heap buffer overflow could happen while processing a TLS handshake. This can happen in a non-deterministic manner...

PT-2026-99003

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao used EscapeLDAPValue, an RFC 4514 distinguished-name escaping function, where RFC 4515 LDAP search-filter escaping was required in sdk/helper/ldaputil/client.go GetUserDN. With the LDAP authentication...

PT-2026-99008

Parse Server is affected by a stored cross-site scripting XSS vulnerability in versions = 9.0.0, 9.10.0 and = 8.6.83. When an uploaded file's extension is not recognized by the mime package, Parse Server preserves the client-supplied Content-Type. A malformed Content-Type that is not a valid...

PT-2026-99014

rclone versions = v1.72.0 and = v1.74.4 fixed in v1.75.0 contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency. The parser fails to validate attacker-controlled superblock and metadata values before...

PT-2026-99021

rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers...

PT-2026-99060

Name of the Vulnerable Software and Affected Versions TDuck survey form versions prior to 6.0 Description Insufficient authorization checks exist within the FormThemeController write endpoints for global form themes and categories. This allows authenticated users without administrative privileges...

PT-2026-99074

Name of the Vulnerable Software and Affected Versions GLPI versions 9.4.0 through 10.0.25 GLPI versions 11.0.0 through 11.0.7 Description An attacker with READ permissions on logs can craft a URL for the history tab to inject controlled values into a database query. This leads to SQL injection, a...

PT-2026-99075

Name of the Vulnerable Software and Affected Versions GLPI versions 11.0.6 through 11.0.7 Description An authenticated technician can store active markup in supplier website fields. This leads to stored cross-site scripting XSS, where any user viewing the affected item's suppliers list triggers t...

PT-2026-99101

Name of the Vulnerable Software and Affected Versions OpenMetadata versions prior to 2.0.3 Description An issue exists in the URLValidator.validateURL function where DNS hostnames are not properly resolved and internal addresses are not correctly validated. This allows users with permissions to...

PT-2026-99125

Name of the Vulnerable Software and Affected Versions Mediawiki - UploadWizard Extension versions prior to 1.46.1 Mediawiki - UploadWizard Extension version 1.45.5 Mediawiki - UploadWizard Extension version 1.43.10 Description Improper neutralization of input during web page generation allows for...

PT-2026-99133

Name of the Vulnerable Software and Affected Versions Flame versions prior to 2.4.1 Description An insufficient session expiration issue exists in the login endpoint. Attackers with former administrator access can obtain tokens with arbitrary lifespans by providing unvalidated duration parameters...

PT-2026-99139

Name of the Vulnerable Software and Affected Versions Horilla versions prior to 2.0.0 Description An issue exists in the export data function within the HorillaListView class located in horilla views/generic/cbv/views.py. The application accepts a columns POST parameter from an authenticated user...

PT-2026-99701

CVE-2026-53990 - Rejected reason: This CVE ID has been rejected or CVE ID :CVE-2026-53990 Published : Sept. 25, 2026, 8:17 p.m. | 1 hour, 8 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for mo...

PT-2026-99702

CVE-2026-57861 - Rejected reason: This CVE ID has been rejected or CVE ID :CVE-2026-57861 Published : Sept. 25, 2026, 8:17 p.m. | 1 hour, 8 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for mo...

PT-2026-98793

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma mapping leak in stmmac tso xmit In stmmac tso xmit, if the DMA mapping of an skb fragment fails, the frame is dropped but the DMA mappings already created for the linear part and for the fragments mapped befo...

PT-2026-98855

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A path traversal issue exists in the Universal Connector Oracle Wallet upload component. This allows an authenticated remote attacker to write arbitrary files to the system. Path traversal ...

PT-2026-98861

Espruino 2v29 commit bffc6d0 contains a NULL pointer dereference vulnerability in jslGetRawString in src/jslex.c. Crafted raw/binary string input can cause the lexer to pass a NULL iterator target to jsvLockAgain. In RELEASE/NO ASSERT builds, the missing assertion guard allows a write through the...

PT-2026-98877

Name of the Vulnerable Software and Affected Versions InvoicePlane versions prior to 1.7.2 Description InvoicePlane stores and serves uploaded image attachments without stripping EXIF metadata Exchangeable Image File Format, a standard for storing metadata in image files. When an administrator...

PT-2026-98884

Name of the Vulnerable Software and Affected Versions InvoicePlane versions prior to 1.7.2 Description InvoicePlane fails to validate Cross-Site Request Forgery CSRF tokens in several delete methods. Specifically, the ensure valid post request function is omitted from Payments::delete,...

PT-2026-98886

Name of the Vulnerable Software and Affected Versions InvoicePlane versions prior to 1.7.2 Description The Users::change password function fails to perform an object-level authorization check when processing a user id provided via the URL. This allows an authenticated secondary administrator to...

PT-2026-98889

Name of the Vulnerable Software and Affected Versions PostgreSQL Anonymizer versions prior to 3.2.3 Description Unprivileged masked users can repeatedly call the anon.hash function to collect seed and hash output pairs. This allows for an offline brute-force attack to deduce the salt. Additionall...

PT-2026-98892

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 16.4.0 Description The check upgrade access rights function in admin/include/functions upgrade.php conditionally escapes the submitted username only if the get magic quotes gpc function exists. In PHP 8 and later, wher...

PT-2026-98895

Name of the Vulnerable Software and Affected Versions Rattadan Cosmowarp versions prior to 56c6147 Description The smart contract contains a logic error where a comparison is made against an unintended value of the current admin variable. Recommendations Update Rattadan Cosmowarp to version 56c61...

PT-2026-98897

Readwise Reader for Android constructs URLs in its WebView using attacker-controlled metadata without proper encoding or escaping. The application interpolates untrusted values directly into URL strings and inserts them into the DOM via innerHTML. Because the interpolation occurs without HTML or...

PT-2026-98898

Readwise Reader for Android uses a sanitize-html configuration that permits all attributes on SVG and PATH elements due to a wildcard attribute rule. This configuration fails to remove script-capable attributes such as event handlers e.g., 'onload', 'onerror'. An attacker could supply a document...

PT-2026-98899

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.0.2 Description An issue with permission checks in the knowledge base management area allows users with limited read permissions to interact with items outside their assigned access scope due to incomplete data...

PT-2026-98900

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 4.0.0 through 4.0.22 RabbitMQ versions 4.1.0 through 4.1.13 RabbitMQ versions 4.2.0 through 4.2.8 RabbitMQ versions 4.3.0 through 4.3.2 Description An issue exists in the AMQP 1.0 HTTP-over-AMQP management endpoint GET...

PT-2026-98901

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 3.13.0 through 3.13.14 RabbitMQ versions 4.0.x through 4.0.21 RabbitMQ versions 4.1.x through 4.1.10 RabbitMQ versions 4.2.x through 4.2.5 RabbitMQ versions 4.3.x through 4.3.0 Description An atom exhaustion issue exists when...

PT-2026-98911

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 4.2.0 through 4.2.7 RabbitMQ versions 4.3.0 through 4.3.1 Description The set token auth/2 function inserts a bearer token from the Authorization header or access token cookie into OAuth bootstrap JavaScript without proper...

PT-2026-98918

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 3.13.0 through 3.13.17 RabbitMQ versions 4.0.0 through 4.0.22 RabbitMQ versions 4.1.0 through 4.1.13 RabbitMQ versions 4.2.0 through 4.2.8 RabbitMQ versions 4.3.0 through 4.3.2 Description The JWKS key fetching mechanism in...

PT-2026-98925

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 3.13.0 through 3.13.18 RabbitMQ versions 4.0.x through 4.0.23 RabbitMQ versions 4.1.x through 4.1.14 RabbitMQ versions 4.2.x through 4.2.9 RabbitMQ versions 4.3.x through 4.3.4 Description An issue exists where OAuth credenti...

PT-2026-98926

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 3.13.0 through 3.13.18 RabbitMQ versions 4.0.x prior to 4.0.24 RabbitMQ versions 4.1.x prior to 4.1.15 RabbitMQ versions 4.2.x prior to 4.2.10 RabbitMQ versions 4.3.x prior to 4.3.5 Description RabbitMQ Management renders an...

PT-2026-98931

Use After Free in the drag source path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to cause the terminal to read from and write to freed heap memory, because drag remote file data in kitty/dnd.c holds a DragRemoteItem pointer into an...

PT-2026-98936

Name of the Vulnerable Software and Affected Versions zhistaredu StarTraining versions prior to 3.8.2 Description A security flaw exists in the api-docs endpoint within the SecurityConfig.java file. A manipulation of an unknown function in this component allows a remote attacker to bypass...

PT-2026-98950

Name of the Vulnerable Software and Affected Versions Zammad version 7.0.2 Zammad version 7.1.0 Description Session management for websocket and long-polling connections is susceptible to a path traversal attack, which occurs when an application uses user-controllable input to construct a path to...

PT-2026-98958

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.1.2 Description A security filter protecting the AI Agent configuration can be bypassed by entering specially crafted text into an AI Agent field. An administrator with permissions to create or edit AI Agents can...

PT-2026-99092

X-SpringBoot through 6.0 returns login verification codes in HTTP responses from unauthenticated endpoints GET /sys/mobile/code and GET /sys/email/code without sending them to account owners. Attackers can request codes using known mobile numbers or email addresses, read them from responses, and...

PT-2026-99121

Name of the Vulnerable Software and Affected Versions Mediawiki - TemplateSandbox Extension versions prior to 1.46.1 Mediawiki - TemplateSandbox Extension version 1.45.5 Mediawiki - TemplateSandbox Extension version 1.43.10 Description Improper neutralization of input during web page generation...

PT-2026-98337

Name of the Vulnerable Software and Affected Versions ningzichun student-management-system versions prior to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf Description A flaw in an unknown function allows remote attackers to perform a manipulation that results in cross-site request forgery, a type of...

PT-2026-98365

Name of the Vulnerable Software and Affected Versions Fancy Product Designer versions prior to 6.5.3 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS, a technique where malicious scripts are permanently stor...