PT-2026-121557

Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a missing GC rooting vulnerability that leaves references live across try call unrooted when compiling Wasm modules. Attackers can supply Wasm modules whose callee triggers garbage collection, leaving stale or dangling references tha...

PT-2026-121678

Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network...

PT-2026-121681

Name of the Vulnerable Software and Affected Versions AAD App Proxy affected versions not specified Description Improper authentication allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that contains ...

PT-2026-121272

The Photo Engine Media Organizer & Lightroom WordPress plugin before 6.5.8 does not sanitise and escape collection and gallery names before storing them and outputting them in an administrative dashboard, allowing authenticated users with the author role and above to perform Stored Cross-Site...

PT-2026-121594

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified Description An authentication bypass in the SSH daemon allows an unauthenticated remote attacker to circumvent authentication controls. This can lead to the attacker gaining administrative privileges and...

PT-2026-121562

Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vulnerability that allows malicious guests to write 16KB to the native stack via unvalidated async callback result types. Attackers can supply components with mistyped component-model-async callback functions ...

PT-2026-121631

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified Description A memory corruption issue exists that allows an authenticated local attacker to execute arbitrary code. Successful exploitation enables the attacker to run arbitrary code with privileged user...

PT-2026-121524

A client-side encryption schema construction component in the MongoDB C Driver places caller-supplied field identifiers into a position that is interpreted as a pattern expression, without normalizing or validating them. As a result, an application that designates certain fields for client-side...

PT-2026-121521

A flaw in the client-side encryption support of the MongoDB .NET/C driver can cause data designated for client-side field-level encryption to be written without encryption. Under certain platform text-encoding configurations, an internal name conversion loses information, so the encryption layer...

PT-2026-121645

No description provided...

PT-2026-121333

Name of the Vulnerable Software and Affected Versions webpack-dev-server versions prior to 5.2.7 webpack-dev-server version 6.0.0 Description When a proxy entry is configured to forward WebSockets, the server forwards non-HMR Hot Module Replacement WebSocket upgrade requests to the proxy target...

PT-2026-121319

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows Stored XSS.This issue affects Extensions for Leaflet Map: from n/a through 6.0...

PT-2026-121513

Missing Authorization CWE-862 in the user API of Roskus Prospero Flow CRM from 2.0.0 before 5.26.0 allows a user with a basic role to read the accounts of other users of its own company, including accounts with higher privileges, and, in versions from 3.5.0, to delete them, because the routes GET...

PT-2026-121672

Name of the Vulnerable Software and Affected Versions E3 affected versions not specified Description The ONVIF device service responds to specific informational requests without requiring authentication. This allows a remote, unauthenticated party to retrieve detailed device identifiers and a lis...

PT-2026-121539

Name of the Vulnerable Software and Affected Versions OpenBao versions prior to 2.6.4 OpenBao versions 2.7.x prior to 2.7.1 Description A flaw exists in the rate limit quota subsystem where role resolution fails for requests containing form-encoded bodies or forwarded certificates. This failure...

PT-2026-121659

Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of the client application. To remediate this issue, users should upgrade to aws-c-mqtt 0.16.2 or later, or to an AWS Common...

PT-2026-121334

webpack-dev-server is a development server that provides live reloading for webpack projects. In versions from 5.1.0 before 5.2.7 and in version 6.0.0, the unauthenticated open-editor endpoint validates the Host header with a regular expression meant for browser Origin schemes, so a Host value...

PT-2026-121728

Report metadata | Field | Value | | --- | --- | | Package | @graphql-tools/utils npm, pkg:github/ardatan/graphql-tools | | Repository | https://github.com/ardatan/graphql-tools | | Component | mergeIncrementalResult / setObjectKeyPath packages/utils/src/mergeIncrementalResult.ts | | Vulnerability...

PT-2026-121305

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ACF Extended ACF Extended acf-extended allows Path Traversal.This issue affects ACF Extended: from n/a through 0.9.2.7...

PT-2026-121628

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified Description Multiple web interface endpoints in AOS-8 devices are susceptible to a buffer overflow when processing specially crafted requests. This flaw allows an unauthenticated remote attacker to execute...

PT-2026-120945

Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, because parse Name resolves their names in the using function's scope rather than at declaration. When a contract's parameter, local, or loop variable shares such a name,...

PT-2026-121378

Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the 'file' parameter. Attackers can send GET requests to /compress.php with '../' sequences in the 'file'...

PT-2026-120957

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail sendmail stripped newline characters only from the Subject and Organization headers, leaving other header values taken from request parameters unsanitized, so a remote authenticated...

PT-2026-121523

A data-query-logic neutralization weakness in the update-statement construction component of the MongoDB C Driver can cause application-supplied values to be interpreted as query/update logic rather than as literal data. An application user who can influence the content of values that the...

PT-2026-120955

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcube image falls back to GD, the available-memory check was applied only on Windows, so on other platforms a crafted image with large dimensions was...

PT-2026-121600

No description provided...

PT-2026-120948

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail sendmail::extract inline images used the media type taken from an inline image data URI without validating it, so a remote authenticated attacker could inject arbitrary MIME part...

PT-2026-121528

Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser's parse link text function that allows unauthenticated attackers to exhaust CPU with unbalanced brackets. Attackers can submit Markdown containing many unbalanced '' or '!' characters, forci...

PT-2026-121611

No description provided...

PT-2026-121650

No description provided...

PT-2026-121265

The WP Ultimate Review WordPress plugin before 2.4.5 does not neutralise shortcodes in all of the review fields submitted through its public review form, which is available to unauthenticated visitors, allowing them to execute arbitrary shortcodes when the affected field is displayed, provided us...

PT-2026-121592

No description provided...

PT-2026-121654

No description provided...

PT-2026-121574

Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile that fails to limit decompressed size or compression ratio. Attackers can persuade a user to import a crafted theme ZIP whose icon entries expand to fill the host filesyste...

PT-2026-121685

Name of the Vulnerable Software and Affected Versions Kiloview E3 NDI encoder affected versions not specified Description The ONVIF device service allows hostname, DNS, and NTP configuration write operations without authentication, ignoring the device's configured authentication settings. A remot...

PT-2026-121541

Name of the Vulnerable Software and Affected Versions OpenBao versions prior to 2.6.3 Description An ACL bypass occurs when explicit deny rules based on forbidden identity metadata templates within wildcard grants are silently dropped. This allows attackers with identity metadata containing...

PT-2026-121615

No description provided...

PT-2026-121547

Name of the Vulnerable Software and Affected Versions OpenBao versions 2.5.0 through 2.6.1 Description When the use csr sans setting is enabled, the software fails to enforce the allowed ip sans cidr restriction on IP Subject Alternative Names SANs extracted from a Certificate Signing Request CSR...

PT-2026-121561

Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability that accepts components whose core modules import WebAssembly tags with a subtype of the original type. Malicious guests can mis-type exception object payloads to corrupt the GC heap, causing...

PT-2026-121278

Out-of-bounds read and write in the Count-Min sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. count min sketch::deserialize did not include the preamble in its input size check, so a truncated sketch could cause a read of up to 16 bytes past the end of the input. In...

PT-2026-121630

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified Description A buffer overflow occurs in the command line interface, which may allow an unauthenticated remote attacker to execute arbitrary commands on the underlying host. This is possible if specific...

PT-2026-121632

No description provided...

PT-2026-121357

Goploy 1.18.0 before 1.18.1 contains a link following vulnerability in the /deploy/fileDiff and /deploy/fileCompare endpoints that allows authenticated members to read arbitrary files. Attackers with repository write access can commit a symlink pointing outside the project directory to read...

PT-2026-121391

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Impacted is an unknown function of the file patappointtime.php of the component Appointment Booking. This manipulation of the argument day/time/appdate causes improper input...

PT-2026-121299

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars off-canvas-sidebars allows Stored XSS.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through 0.5.9...

PT-2026-121366

JSON-SCADA before 0.65-alpha contains an sql injection vulnerability in opcApi in src/server realtime auth/index.js that allows authenticated users to inject SQL via HistoryReadRequest parameters. Attackers can inject stacked statements through NodeId.Id, StartTime, or EndTime values to read,...

PT-2026-121262

NT OneAPP developed by NewType Infortech has an Authentication Bypass vulnerability. Unauthenticated local attackers can bypass the App PIN lock mechanism via a Deep Link, thereby accessing protected resources of a logged-in user...

PT-2026-121303

Authentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart surecart allows Authentication Abuse.This issue affects SureCart: from n/a through 4.9.5...

PT-2026-121393

Name of the Vulnerable Software and Affected Versions EmberZNet versions prior to 9.1.2 Description A malformed Discover Attributes command can cause an infinite loop with an unreachable exit condition. This issue specifically affects devices that support manufacturer-specific clusters and requir...

PT-2026-121369

Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by supplying crafted billable metric property name or categorical filter values. Attackers can embed SQL in values rendered unescaped into Jinja-generated counter, gauge and rat...