PT-2026-99180

Name of the Vulnerable Software and Affected Versions openclaw versions prior to 2026.8.1 Description Redacted configuration responses may include deterministic hashes computed from the original, unredacted configuration. If the Gateway password has low entropy and other configuration values can ...

PT-2026-99322

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.29.0 Description The software fails to enforce decoder prompt-length validation on the disaggregated serving endpoint '/inference/v1/generate'. When a request includes a 'features' multimodal payload, the system builds...

PT-2026-99165

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description When a third-party provider uses an OpenAI-compatible API and the resolved model metadata lacks a concrete base URL, a pinned session that continues after a model configuration hot reload retains...

PT-2026-99433

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Uncontrolled Resource Consumption in Kibana can lead to a denial of service through excessive allocation. This occurs when the system fails to limit the amount of resources allocated, allowing...

PT-2026-99279

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.5 Description When the server operates in queue mode with the dashboard enabled and is not in cloud mode MODE=queue, ENABLE BULLMQ DASHBOARD=true, and !isCloud, the /admin/queues endpoint is protected only by the...

PT-2026-99338

Name of the Vulnerable Software and Affected Versions grav-plugin-login versions 3.8.7 through 3.9.6 Description A flaw exists where the two-factor authentication 2FA challenge can be bypassed for content protected by the authenticated Twig function or the authenticated shortcode. This occurs...

PT-2026-99357

Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.45.0 Description Insufficient per-app authorization validation in the 'POST /api/global/groups/:groupId/apps' endpoint allows users with builder privileges to assign application roles across workspace boundaries. A...

PT-2026-99249

Name of the Vulnerable Software and Affected Versions MCP Server for WordPress versions prior to 1.8.2 Description The plugin fails to perform ownership or sufficient capability checks on its REST routes used to create, update, and delete workflows. This allows users with the Contributor role to...

PT-2026-99345

Name of the Vulnerable Software and Affected Versions stoatchat versions prior to 0.15.5 Description Insufficient revalidation of usernames after Unicode sanitization allows the creation of usernames containing forbidden characters. By submitting specific Unicode letters that transform into...

PT-2026-99348

Name of the Vulnerable Software and Affected Versions stoatchat versions prior to 0.15.5 Description An account enumeration issue exists in the login endpoint. Unauthenticated attackers can identify whether an email address is registered by analyzing the error location fields returned in the...

PT-2026-99308

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.4 Description A path traversal issue exists in the 'checkoutRepo' endpoint. Authenticated administrators can overwrite arbitrary JSON files in pre-existing kernel-writable directories outside the workspace boundari...

PT-2026-99731

CVE-2026-49118 - Rejected reason: This CVE ID has been rejected or CVE ID :CVE-2026-49118 Published : Sept. 25, 2026, 10:17 p.m. | 3 hours, 8 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for...

PT-2026-99314

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.4 Description Authenticated attackers can inject JavaScript by modifying field descriptions, template sources, select option descriptions, or footer calculation templates because four stored Attribute View values i...

PT-2026-99255

Name of the Vulnerable Software and Affected Versions CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be Description A remote cross site scripting issue exists within the Faculty Video Management component in the managevideos2.php file. The flaw allows an attacker ...

PT-2026-99178

Name of the Vulnerable Software and Affected Versions @openclaw/matrix versions 2026.2.2 through 2026.8.0 Description The Matrix integration lowercases complete Matrix user IDs, including historical localparts and the case-sensitive server-name portion, when deriving the authorization identity...

PT-2026-99311

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.4 Description An authorization omission exists in the siyuan-get IPC handler. This allows remote-kernel renderers to access native clipboard formats by invoking the clipboardReadMathML, clipboardReadOffice, and...

PT-2026-99316

Name of the Vulnerable Software and Affected Versions SiYuan versions 3.7.0 through 3.8.3 Description A stored cross-site scripting issue exists in the gallery and kanban database renderers because field descriptions are not escaped in aria-label attributes. In the Electron desktop application wh...

PT-2026-99330

Name of the Vulnerable Software and Affected Versions netty-codec-http3 versions 4.2.0.Final through 4.2.17.Final Description The HTTP/3 codec fails to enforce the RFC 9114 requirement that the :authority pseudo-header field and a literal host header field must carry the same value when both are...

PT-2026-99385

Name of the Vulnerable Software and Affected Versions Froxlor versions prior to 2.3.12 Description Insufficient restriction and escaping of the system.letsencryptchallengepath setting allows for command injection. The value of this setting is concatenated unescaped into the acme.sh command line...

PT-2026-99355

Name of the Vulnerable Software and Affected Versions Budibase versions 3.41.0 through 3.44.9 Description An authentication bypass exists in the OIDC/SSO login path of @budibase/server. Within the sso.authenticate function, the server fails to validate an invite code or perform an email verified...

PT-2026-99367

Name of the Vulnerable Software and Affected Versions Adminer versions 4.16.0 through 6.0.1 Description A pre-authentication Server-Side Request Forgery SSRF exists in the optional Elasticsearch driver located at plugins/drivers/elastic.php. The issue occurs because adminer/include/auth.inc.php...

PT-2026-99239

Name of the Vulnerable Software and Affected Versions Team Members WordPress plugin versions prior to 9.3 Description An unauthenticated AJAX action fails to perform authorization or visibility checks when returning team member records by ID. This allows unauthenticated attackers to enumerate and...

PT-2026-99389

Name of the Vulnerable Software and Affected Versions Froxlor versions prior to 2.3.12 Description The software fails to enforce the mail.allow external domains policy within the 'EmailSender.add' API endpoint. When an administrator enables the allowed-sender feature but disables external...

PT-2026-99241

Name of the Vulnerable Software and Affected Versions File Manager WordPress plugin versions prior to 8.0.5 Description An issue exists where unauthenticated users can download database backup archives. In certain scenarios, these archives are saved using a fixed filename, enabling attackers to...

PT-2026-99310

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.4 Description Insufficient HTML-escaping of the data-subtype attribute occurs when generating gutter-button markup from plain-text Markdown containing a Kramdown inline attribute list IAL. The Lute renderer parses...

PT-2026-99276

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.5 Description Missing route-level Role-Based Access Control RBAC checks on chat message endpoints allow users with low-privileged API keys to read and delete chat history. This issue enables attackers to access GE...

PT-2026-99736

CVE-2026-7800 - Rejected reason: This CVE ID has been rejected or CVE ID :CVE-2026-7800 Published : Sept. 25, 2026, 10:18 p.m. | 3 hours, 6 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for mo...

PT-2026-99177

Name of the Vulnerable Software and Affected Versions OpenClaw Feishu versions prior to 2026.8.1 Description The software fails to validate if a configured default account is disabled before selecting it for model tool operations. In multi-account configurations, this allows attackers to use a...

PT-2026-99312

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.4 Description Stored flashcard block content is not HTML-escaped before being interpolated into the card-manager list markup. Content returned by the '/api/riff/getRiffCards' endpoint is inserted into a template in...

PT-2026-99236

Name of the Vulnerable Software and Affected Versions Automatic.css version 4.0.0 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS via the REQUEST URI variable. This allows the injection of arbitrary web...

PT-2026-99202

Name of the Vulnerable Software and Affected Versions OpenClaw LINE versions prior to 2026.8.1 Description An access control issue exists where the group allowlist mode silently inherits values from the DM allowFrom variable when groupAllowFrom is not explicitly configured. This allows attackers...

PT-2026-99306

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.4 Description An authentication bypass exists in the publish service where session cookies are issued without Secure or SameSite attributes over plaintext HTTP connections. An on-path attacker can observe a valid...

PT-2026-99281

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.5 Description Insufficient route-level permission checks and a lack of workspace or ownership validation in the backing service allow authenticated low-privilege users or those with a valid API key to access or...

PT-2026-99164

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.2 Description A denial of service issue exists in the Browser extension relay. Unauthenticated network sources can exhaust the pending-authentication capacity by maintaining silent WebSocket upgrades. This...

PT-2026-99430

Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Uncontrolled Resource Consumption in Elasticsearch can lead to a denial of service through excessive allocation. This occurs when the system fails to limit the amount of resources...

PT-2026-99411

Name of the Vulnerable Software and Affected Versions Groups – Memberships and Access Control versions prior to 4.6.1 Description An issue exists where the groups join function determines group-join eligibility based on the author capabilities of the ambient post via the global $post-post author...

PT-2026-99256

Name of the Vulnerable Software and Affected Versions CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be Description A remote SQL injection is possible through the manipulation of the gname or editassid arguments within an unknown function of the /updateguest.php...

PT-2026-99765

CVE-2026-9652 - Rejected reason: This CVE ID has been rejected or CVE ID :CVE-2026-9652 Published : Sept. 25, 2026, 10:18 p.m. | 3 hours, 6 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for mo...

PT-2026-99296

Name of the Vulnerable Software and Affected Versions Capgo capgo.app affected versions not specified Description A native build TUS upload proxy at the endpoint supabase/functions/ backend/public/build/upload.ts improperly handles authorization. The proxy validates the caller against a specific...

PT-2026-99232

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.7.1 Description Insufficient authorization for non-owner users allows the execution of MCP configuration changes via the '/mcp set' and '/mcp unset' endpoints. This flaw enables attackers to persist arbitrary...

PT-2026-99371

Name of the Vulnerable Software and Affected Versions nodemailer versions prior to 10.0.6 Description A denial of service issue exists in the addressparser free-text fallback regex pattern. The pattern exhibits quadratic backtracking, which occurs when a regular expression engine takes an...

PT-2026-99303

Name of the Vulnerable Software and Affected Versions Parse Server versions 9.0.0 through 9.10.1-alpha.7 Parse Server versions prior to 8.6.89 Description LiveQuery evaluates the protectedFields class-level permission using an incompletely resolved caller identity. Because subscriber roles are no...

PT-2026-99221

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.7.1 Description The openclaw npm package fails to enforce owner-only authorization for Claude Code permission prompts sent via the MCP channel bridge. This allows an authorized non-owner with channel command...

PT-2026-99427

Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Uncontrolled Resource Consumption in Elasticsearch can lead to a denial of service through excessive allocation, which occurs when a system allocates more memory or resources than...

PT-2026-99190

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.6.9 through 2026.8.0 Description The Feishu unpin feature fails to declare the native chatId parameter as a delivery target. This allows unpin requests to bypass the shared same-provider cross-context target check. When...

PT-2026-99206

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.3.28 through 2026.8.0 Description An issue exists where an untrusted workspace .env file can set the CLOUDSDK PYTHON ARGS environment variable. If an operator starts the software within attacker-controlled workspace...

PT-2026-99349

Name of the Vulnerable Software and Affected Versions stoatchat versions prior to 0.15.5 Description Insufficient enforcement of account-level attempt limits during MFA login challenges allows attackers with a valid password to guess TOTP Time-based One-Time Password codes. Because rate limiting ...

PT-2026-99189

Name of the Vulnerable Software and Affected Versions openclaw versions prior to 2026.8.1 Description The software fails to correctly enforce per-chat tool policies for Codex app-server runtime tools. Specifically, a conversation-level tools.allow rule filters OpenClaw tools but fails to restrict...

PT-2026-99318

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.29.0 Description A denial-of-service issue exists in OpenAI-compatible and Anthropic API endpoints. The cache salt parameter lacks maximum length validation and is processed on the single EngineCore scheduler thread...

PT-2026-99351

Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.45.0 Description Authenticated builders can read arbitrary local files because the OpenAPI/Swagger import validator fails to disable external JSON reference resolution. By embedding file:// references within OpenAP...