PT-2026-121592

No description provided...

PT-2026-121654

No description provided...

PT-2026-121315

Name of the Vulnerable Software and Affected Versions WatchGuard Agent affected versions not specified Description An incorrect permission assignment in the log directory allows a local, authenticated non-administrative user to create, modify, append to, or delete log files and write other files...

PT-2026-121574

Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile that fails to limit decompressed size or compression ratio. Attackers can persuade a user to import a crafted theme ZIP whose icon entries expand to fill the host filesyste...

PT-2026-121685

Name of the Vulnerable Software and Affected Versions Kiloview E3 NDI encoder affected versions not specified Description The ONVIF device service allows hostname, DNS, and NTP configuration write operations without authentication, ignoring the device's configured authentication settings. A remot...

PT-2026-121541

Name of the Vulnerable Software and Affected Versions OpenBao versions prior to 2.6.3 Description An ACL bypass occurs when explicit deny rules based on forbidden identity metadata templates within wildcard grants are silently dropped. This allows attackers with identity metadata containing...

PT-2026-121615

No description provided...

PT-2026-121547

Name of the Vulnerable Software and Affected Versions OpenBao versions 2.5.0 through 2.6.1 Description When the use csr sans setting is enabled, the software fails to enforce the allowed ip sans cidr restriction on IP Subject Alternative Names SANs extracted from a Certificate Signing Request CSR...

PT-2026-121561

Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability that accepts components whose core modules import WebAssembly tags with a subtype of the original type. Malicious guests can mis-type exception object payloads to corrupt the GC heap, causing...

PT-2026-121401

An issue in SKYWORTH DIGITAL CO., LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router AX1800M V1.0.3 allows a remote attacker to obtain sensitive information via the hidden factory switch.gch...

PT-2026-121278

Out-of-bounds read and write in the Count-Min sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. count min sketch::deserialize did not include the preamble in its input size check, so a truncated sketch could cause a read of up to 16 bytes past the end of the input. In...

PT-2026-121501

An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed said URL in the the templateURL to the localstack/cloudformation/deploy endpoint, the hosted content can get executed in the context of the...

PT-2026-121630

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified Description A buffer overflow occurs in the command line interface, which may allow an unauthenticated remote attacker to execute arbitrary commands on the underlying host. This is possible if specific...

PT-2026-121632

No description provided...

PT-2026-121357

Goploy 1.18.0 before 1.18.1 contains a link following vulnerability in the /deploy/fileDiff and /deploy/fileCompare endpoints that allows authenticated members to read arbitrary files. Attackers with repository write access can commit a symlink pointing outside the project directory to read...

PT-2026-121391

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Impacted is an unknown function of the file patappointtime.php of the component Appointment Booking. This manipulation of the argument day/time/appdate causes improper input...

PT-2026-121299

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars off-canvas-sidebars allows Stored XSS.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through 0.5.9...

PT-2026-121366

JSON-SCADA before 0.65-alpha contains an sql injection vulnerability in opcApi in src/server realtime auth/index.js that allows authenticated users to inject SQL via HistoryReadRequest parameters. Attackers can inject stacked statements through NodeId.Id, StartTime, or EndTime values to read,...

PT-2026-120968

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource consumption vulnerability in the CSS proxy the utils/modcss action. The fetched stylesheet was read into memory in full, with no size limit and no read timeout, so a stylesheet URL referencing an...

PT-2026-121573

Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme that extracts unlimited theme ZIP entries to the images directory. Attackers can persuade users to import a crafted theme archive with many small files, exhausting inodes and disk space...

PT-2026-121262

NT OneAPP developed by NewType Infortech has an Authentication Bypass vulnerability. Unauthenticated local attackers can bypass the App PIN lock mechanism via a Deep Link, thereby accessing protected resources of a logged-in user...

PT-2026-121626

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified Description A flaw in the web interface allows an unauthenticated remote attacker to achieve remote code execution. This could result in full control of the device, allowing the attacker to intercept netwo...

PT-2026-121303

Authentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart surecart allows Authentication Abuse.This issue affects SureCart: from n/a through 4.9.5...

PT-2026-121393

Name of the Vulnerable Software and Affected Versions EmberZNet versions prior to 9.1.2 Description A malformed Discover Attributes command can cause an infinite loop with an unreachable exit condition. This issue specifically affects devices that support manufacturer-specific clusters and requir...

PT-2026-121363

Netmaker through 1.7.0 contains an authorization bypass vulnerability in the updateExtClient handler that allows network-scoped users to modify external clients on other networks. Attackers with external client permissions on one network can send PUT requests to /api/extclients/network/clientid t...

PT-2026-121338

A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow to apply a specially crafted patch file. Due to missing validation during automatic patch reversal, absolute file paths in patch headers a...

PT-2026-121369

Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by supplying crafted billable metric property name or categorical filter values. Attackers can embed SQL in values rendered unescaped into Jinja-generated counter, gauge and rat...

PT-2026-121302

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Code Injection.This issue affects Royal Elementor Addons: from n/a through 1.7.1068...

PT-2026-121261

NT OneAPP developed by NewType Infortech has a Credential Disclosure vulnerability. Unauthenticated remote attackers can trigger an HTTP Basic Authentication challenge from an unvalidated source in the WebView under specific conditions, thereby obtaining the NUP Portal passcode of a logged-in use...

PT-2026-121283

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in H5P H5P h5p allows Stored XSS.This issue affects H5P: from n/a through 1.17.9...

PT-2026-121290

A flaw was found in mod qos. An unauthenticated remote attacker can cause a Denial of Service DoS by maintaining numerous concurrent low-rate connections to a target server. When connection rate monitoring is active, the module fails to verify array boundaries when recording client IP addresses,...

PT-2026-121279

Allocation of Resources Without Limits or Throttling vulnerability in esaml binding in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the node via a crafted SAMLResponse. esaml binding:decode response/2 parses the decoded SAMLResponse with xmerl...

PT-2026-121281

Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Falcon – WordPress Optimizations & Tweaks: from n/a through 2.12.0...

PT-2026-120890

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268 B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cste modules/product.so. Executing a manipulation of the argument FileMd5 can lead to command injection. The attack can be launched remotely. The exploit has...

PT-2026-120963

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling of FuncIRI attributes. rcube washtml detected the CSS url token with a pattern that enumerated only some of its escaped spellings, so values using other CSS escape sequences, for...

PT-2026-120966

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass. rcube washtml inspected the SVG SMIL animation attributes to, from and values for URIs, but not by; so markup such as in an HTML message caused remote content to be loaded without the user's...

PT-2026-121663

Name of the Vulnerable Software and Affected Versions Authlib versions prior to 1.9.1 Description Authlib is a Python library used to build OAuth and OpenID Connect servers. The OctKey.import key function and the HMAC signing and verification path accept zero-length key material. If an...

PT-2026-121674

Name of the Vulnerable Software and Affected Versions Authlib versions prior to 1.9.0 Description The OpenIDMixin.parse id token function in the authlib/integrations/base client/sync openid.py and authlib/integrations/base client/async openid.py files incorrectly processes the nonce supported cla...

PT-2026-121661

Name of the Vulnerable Software and Affected Versions Authlib versions 0.13 through 1.7.9 Description The is secure transport function in authlib/common/security.py uses a textual prefix comparison for loopback HTTP exemptions. This allows a URL with a userinfo component starting with a loopback...

PT-2026-121422

JetBackup plugin for WordPress before 3.1.24.10 contains a symlink-based arbitrary file write vulnerability that allows an authenticated WordPress administrator to write attacker-controlled file contents outside the intended restore destination during backup import and restore. Attackers can craf...

PT-2026-121404

Name of the Vulnerable Software and Affected Versions Flexible GraphRAG versions 0.6.0 through 0.8.1 Description The escape helper in flexible-graphrag/langchain/graph/pg store adapters/falkordb adapter.py incorrectly escapes quotes before backslashes. This allows an inserted escape to be doubled...

PT-2026-121677

Name of the Vulnerable Software and Affected Versions Authlib versions prior to 1.9.0 Description In the RFC 9101 JWTAuthenticationRequest implementation within authlib/oauth2/rfc9101/authorization server.py, the unauthenticated and client-controlled request uri parameter is passed to the abstrac...

PT-2026-121662

Name of the Vulnerable Software and Affected Versions Authlib versions 1.3.1 through 1.8.9 Description An issue exists in the OctKey.import key function within authlib/jose/rfc7518/oct key.py where asymmetric-key markers are only checked at byte zero. Because PEM loaders accept leading whitespace...

PT-2026-121676

Name of the Vulnerable Software and Affected Versions Authlib versions prior to 1.9.0 Description In the OpenIDImplicitGrant.validate authorization request function, the library checks the client-controlled raw request.payload.scope for the openid scope instead of using the filtered request.scope...

PT-2026-121675

Name of the Vulnerable Software and Affected Versions Authlib versions prior to 1.9.0 Description The default JWTBearerGrant.get audiences function returns an empty list, which leads JWTBearerGrant.verify claims to only check for the existence of an aud claim without verifying if it matches the...

PT-2026-121425

Name of the Vulnerable Software and Affected Versions Better Auth versions 1.4.0-beta.18 through 1.7.6 Description An issue exists where deployments using specific configurations can accept an OAuth sign-in state value as a Magic Link token. This occurs when Magic Link is enabled with storeToken...

PT-2026-121486

Name of the Vulnerable Software and Affected Versions fpdf2 versions 2.5.0 through 2.8.7 Description The SVGObject.build xref function passes nested SVG references to GraphicsContext.add item. Due to the default clone=True deep-copy behavior during FPDF.image processing, the complete referenced...

PT-2026-121482

Name of the Vulnerable Software and Affected Versions PhpSpreadsheet versions prior to 1.30.7 PhpSpreadsheet versions prior to 2.1.19 PhpSpreadsheet versions prior to 2.4.8 PhpSpreadsheet versions prior to 3.10.8 PhpSpreadsheet versions prior to 5.10.0 Description When setAllowExternalImages is...

PT-2026-121426

Name of the Vulnerable Software and Affected Versions Pylint versions 0.15.2 through 4.0.8 Description Pylint stores module statistics in predictable files under PYLINT HOME and loads them using the pickle.load function during subsequent executions. An attacker with write access to a shared,...

PT-2026-121423

Name of the Vulnerable Software and Affected Versions dnspython versions prior to 2.9.0 Description The dns.name.from wire parser function fails to implement a hop limit when following DNS compression pointer chains. An attacker can send a specially crafted DNS wire-format message that triggers...