PT-2026-120488

In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making the Block Storage API v3.3 "List messages" call finds the non-expired user messages for other projects included in the...

PT-2026-120824

Name of the Vulnerable Software and Affected Versions itsourcecode Online Cake Ordering System version 1.0 Description A remote SQL injection is possible due to improper handling of the prcd variable within the /inserttrans.php endpoint. SQL injection is a technique where an attacker inserts...

PT-2026-120923

Data Field allows you to create custom fields with multiple values under the default table form. The file uri formatter does not properly escape filenames when rendering links to uploaded files. This vulnerability is mitigated by the fact that an attacker must have a role with the permission to...

PT-2026-120287

Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingteng Host Adaptive Security Platform Host Monitoring V3.0 allows an authenticated console administrator to execute arbitrary commands on attached clients via OS command injection...

PT-2026-120856

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.4 Splunk Enterprise versions prior to 10.2.8 Description A user without admin or power roles can derive the PostgreSQL sidecar database superuser password. This occurs because the PostgreSQL sidecar...

PT-2026-120452

The Moloni WordPress plugin before 5.0.14 does not perform capability or nonce checks on several of its authenticated AJAX actions, relying only on whether the site holds a stored connection to its external invoicing provider, allowing any authenticated user such as a Subscriber to generate fisca...

PT-2026-120597

A security vulnerability has been detected in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. This affects an unknown part of the file /Admin/includes/AddNewPlan-inc.php of the component Plan Management Form. The...

PT-2026-120649

Insertion of sensitive information into a log file in the SMTP server of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a local user who can read the server's log, or anyone given a copy of it, to obtain credentials. With SMTP logging enabled, the server hid the credential of an AUTH...

PT-2026-120202

Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated tenants to make the webapp server send POST requests to internal hosts by setting an unvalidated webhook alert channel URL. Attackers can point the webhook at internal services or cloud...

PT-2026-120163

A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login prepare hnap of the file etc/defnodes/defaultvalue.xml of the component HNAP Login. The manipulation of the argument Password leads to empty password in configuration file. The attack can be...

PT-2026-120451

The Booking Package WordPress plugin before 1.7.31 does not perform authorization checks before returning calendar-account configuration in a response, allowing unauthenticated users to disclose sensitive settings including the administrator's notification email addresses...

PT-2026-120619

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeHunk ThemeHunk Customizer themehunk-customizer allows Reflected XSS.This issue affects ThemeHunk Customizer: from n/a through 2.8.7...

PT-2026-120448

The Ettrick Escape Room Booking WordPress plugin before 1.3.1 does not verify a booking's payment status against the payment provider before marking it paid and confirmed, allowing unauthenticated attackers to mark bookings as paid without paying...

PT-2026-120454

The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not verify that the acting user is permitted to manage the targeted accounts before changing their verification state, allowing a subsite administrator on a multisite network to mark arbitrary network users outside their own sit...

PT-2026-120487

The Click n Chat Chat Widget Integration WordPress plugin before 1.1.3 does not perform any authorization check on a lead-export handler, allowing unauthenticated users to download every captured contact record names, email addresses and phone numbers...

PT-2026-120192

Trigger.dev before 4.7.0 contains a missing authorization vulnerability that allows holders of unrestricted environment API keys to block runs they do not own by supplying a foreign parentRunId to batch-creation endpoints. Attackers can send requests to POST /api/v3/batches or POST...

PT-2026-120851

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Splunk Enterprise versions prior to 10.2.8 Splunk Enterprise versions prior to 10.0.11 Splunk Enterprise versions prior to 9.4.16 Description A user with the edit manager xml capability can execute...

PT-2026-120862

In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to edit Automation Brokers could download the Splunk SOAR Automation Broker Docker Compose configuration file. The file contains the Uniform Resource Locator URL of the Splunk SOAR instance, the...

PT-2026-120829

Name of the Vulnerable Software and Affected Versions Rex versions prior to 1.16.2 Description The software accepts unknown SSH host keys during remote rsync transfers because the sync function hardcodes the StrictHostKeyChecking=no option. This occurs across all remote branches of sync, includin...

PT-2026-120908

This theme provides a front-end design for transparency and open-government sites, including a table preview of CSV files attached to content. The theme doesn't sufficiently check file access when it renders that preview. It reads the file directly, so a visitor who may view the content, but whos...

PT-2026-120766

🚨 CVE-2026-111401 Cross-Site Request Forgery CSRF vulnerability in Tailored Media Tailored Tools tailored-tools allows Cross Site Request Forgery.This issue affects Tailored Tools: from n/a through 3.0.3. 🎖@cveNotify...

PT-2026-120775

The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evaluation fails. In data ready work handler drivers/sensor/broadcom/afbr s50/afbr s50.c, a non-STATUS OK return from Argus EvaluateData calls handle error on result, which finalises the reques...

PT-2026-120827

Name of the Vulnerable Software and Affected Versions TastyIgniter versions prior to 4.4.6 Description Authenticated administrators can achieve arbitrary code execution by submitting a serialized PHP object as a settings value. This occurs because the value is stored without sanitization and...

PT-2026-120515

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions prior to 1.26.2 Description NLnet Labs Unbound limits compression-pointer traversal for each individual domain-name operation but lacks an aggregate inbound decompression-work budget. A malicious actor with...

PT-2026-120915

This module introduces an OAuth 2.0 authorization server, which can be configured to protect your Drupal instance with access tokens, or allow clients to request new access tokens and refresh them. Since version 6.1.0, the module could cache a token's permissions in a way that let them be reused...

PT-2026-120630

A stack overflow in the gf bifs dec node function /bifs/field decode.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

PT-2026-120698

Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder affected versions not specified Cisco Prime Collaboration Deployment affected versions not specified Cisco Unified Communications Manager Unified CM affected versions not specified Cisco Unified Communications Manager...

PT-2026-120825

A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /orderdetail.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly...

PT-2026-120686

Name of the Vulnerable Software and Affected Versions Snort 3 affected versions not specified Description An issue exists involving incorrect calculations, categorized under Common Weakness Enumeration CWE Base CWE-682. Recommendations At the moment, there is no information about a newer version...

PT-2026-120603

When a WSO2 product is configured to use an external user store, the system fails to adequately obscure the existence or validity of usernames during authentication attempts. This oversight allows an attacker to repeatedly query the authentication mechanism with different username guesses, enabli...

PT-2026-120602

The product failed to enforce validation constraints on user-supplied input in URL parameters, allowing sensitive data to be passed to flows where it was not intended to be processed. Although the product did not utilize this data, its acceptance could lead to logging. If a user mistakenly sends...

PT-2026-120601

Due to an incomplete implementation, reCaptcha is not applied to certain authentication flows even when the reCaptcha option is enabled. This oversight permits attackers to bypass the intended protection mechanism. Brute force attacks, if successful, can lead to unauthorized access to user accoun...

PT-2026-120604

The system fails to invalidate existing access tokens associated with sub-organization users during sensitive account management operations such as password reset, role change, or sub-organization disablement. This oversight allows previously issued tokens to remain active even after the user's...

PT-2026-120599

The callback URL parameter in WSO2 API Manager fails to validate user-supplied input, allowing it to be controlled by malicious actors. Exploitation of this vulnerability could lead to users being redirected to attacker-controlled web pages. This can be used in conjunction with social engineering...

PT-2026-120600

The Authentication Endpoint accepts user-supplied input without sufficient encoding, allowing for the injection of malicious JavaScript payloads. This vulnerability can be triggered by submitting crafted input to the Authentication Endpoint. Successful exploitation allows an attacker to redirect...

PT-2026-120222

Dulwich from 0.24.0 before 1.2.8 contains a symlink following vulnerability in porcelain.checkoutpaths=... that allows attackers to write arbitrary files by abusing raw os.open without O NOFOLLOW. Attackers can craft a repository where a worktree symlink points to .git/hooks/post-checkout, so...

PT-2026-120684

Name of the Vulnerable Software and Affected Versions Cisco products affected versions not specified Description An issue exists in the Snort 3 Visual Basic for Applications VBA Decompression Engine. This is caused by improper range checking during the decompression of user-controlled VBA data. A...

PT-2026-120680

Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error...

PT-2026-120685

Name of the Vulnerable Software and Affected Versions Cisco products affected versions not specified Description A flaw exists in the generic routing encapsulation GRE tunnel decapsulation feature of the Snort 3 Detection Engine. The issue stems from improper handling of nested GRE traffic, which...

PT-2026-120681

Name of the Vulnerable Software and Affected Versions Snort 3 affected versions not specified Description An issue involving out-of-bounds writes occurs in the software. Out-of-bounds write is a condition where the software writes data past the end, or before the beginning, of the intended buffer...

PT-2026-120688

Name of the Vulnerable Software and Affected Versions Snort 3 affected versions not specified Description An issue exists involving uncontrolled resource consumption, which occurs when an application does not properly limit the amount of resources it consumes, potentially leading to a denial of...

PT-2026-120690

Name of the Vulnerable Software and Affected Versions Cisco products affected versions not specified Description A flaw in the Snort 3 Detection Engine allows an unauthenticated remote attacker to cause a denial of service DoS condition. The issue occurs during the processing of General Packet...

PT-2026-120682

Name of the Vulnerable Software and Affected Versions Cisco products affected versions not specified Description A flaw exists in the Snort 3 Generic Routing Encapsulation GRE Detection Engine due to incomplete error checking during the parsing of GRE packets. An unauthenticated remote attacker c...

PT-2026-120702

Name of the Vulnerable Software and Affected Versions Cisco products affected versions not specified Description A memory management issue exists in the Snort 3 Detection Engine due to incomplete error checking during file processing. This flaw can lead to unreleased memory, which an...

PT-2026-120817

Name of the Vulnerable Software and Affected Versions ca-certificates affected versions not specified Description The system certificate authority CA store in Red Hat products, distributed via ca-certificates RPM packages, includes root CA certificates that signed intermediate CA certificates wit...

PT-2026-120687

Name of the Vulnerable Software and Affected Versions Snort 3 affected versions not specified Description Improper privilege management issues exist within the software, which may allow for unauthorized elevation of privileges. Recommendations At the moment, there is no information about a newer...

PT-2026-120201

Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows holders of capability-restricted user-actor tokens to create alert channels by using the legacy personal access token helper. Attackers with a read-only UAT can POST to the project alertChannels endpoint to creat...

PT-2026-120656

Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write, naming in its From an address at a domain the server hosts, delivered to other receivers as passing that domain...

PT-2026-120811

Name of the Vulnerable Software and Affected Versions toml-node versions prior to 5.0.1 Description The toml.parse function allows writing attacker-controlled properties to Object.prototype. This occurs because the quoteDottedString function in lib/compiler.js generates identical bookkeeping...

PT-2026-120707

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series affected versions not specified Description An internal security review identified issues related to code injections. This flaw allows the injection of malicious code into the system, which is categorized under CWE-94...