PT-2026-118626

Name of the Vulnerable Software and Affected Versions virtualenv versions prior to 21.14.9 Description The app-data copy seeder uses the shutil.copy function to copy cached package files into new environments. This process causes cached source modes to override the current run's umask a user...

PT-2026-118627

Name of the Vulnerable Software and Affected Versions virtualenv versions prior to 21.14.9 Description A flaw exists where ViaTemplateActivator. generate only removes existing output if Path.exists is true, which allows a dangling symlink to persist and redirect activation content. Additionally,...

PT-2026-119526

DBI versions before 1.656 for Perl crash via type confusion in dbi profile when a database handle is destroyed under a Profile Path with an attr element. An attr element names a database handle attribute, which dbi profile reads from the handle's inner hash. It expects the inner handle as a...

PT-2026-120004

Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft component: Bidder Registration. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

PT-2026-118496

Name of the Vulnerable Software and Affected Versions uploadfs versions prior to 1.28.0 Description The local storage backend of the uploadfs library fails to properly validate or sanitize user-supplied paths. The prefixPath function only removes double slashes and does not normalize paths or...

PT-2026-118305

The backend module does not check whether a backend user has access to the requested site. Users with access to the module can therefore open the analytics dashboard of any site...

PT-2026-118590

Name of the Vulnerable Software and Affected Versions Wavlink WL-WN530BE1-A versions prior to M30BE1 V251117 Description An OS command injection flaw exists in the sub 23B54 function of the ioos binary. The issue occurs when the /protocol.csp?opt=ovpn file endpoint processes requests with type=de...

PT-2026-119385

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Payroll versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Payroll product. A low privileged attacker with network access via HTTP can compromise the...

PT-2026-119681

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful...

PT-2026-119747

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SOA Suite...

PT-2026-118361

Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell interface. An authenticated local attacker with restricted shell access can exploit this vulnerability to bypass local security restrictions and gain root access on th...

PT-2026-119301

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability...

PT-2026-119419

Name of the Vulnerable Software and Affected Versions Oracle Agile Engineering Data Management version 6.2.1 Description An issue exists in the Install component of the Oracle Agile Engineering Data Management product. An unauthenticated attacker with access to the physical communication segment...

PT-2026-119998

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft component: eProcurement. The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterpri...

PT-2026-120102

Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.8.3.0.0 Description A security flaw in the Security component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a complete takeover of the...

PT-2026-118580

Name of the Vulnerable Software and Affected Versions aaPanel versions prior to 8.25.0 Description Remote improper access controls occur due to the manipulation of the X-Real-Ip argument within the GetClientIp function located in the class/public/common.py file. Recommendations Update aaPanel to...

PT-2026-120133

IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read...

PT-2026-119261

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-dns-resolver-round-robin. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via DNS to compromise...

PT-2026-119643

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Enterprise Infrastructure SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD...

PT-2026-119340

Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile Fie...

PT-2026-119373

Name of the Vulnerable Software and Affected Versions Oracle One-to-One Fulfillment versions 12.2.3 through 12.2.15 Description An issue exists in the Documents component of the Oracle One-to-One Fulfillment product of Oracle E-Business Suite. A low privileged attacker with network access via HTT...

PT-2026-119137

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Siebel Management Console. Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows physical access to compromise Siebel CRM Deployment. Successful attacks of this vulnerability c...

PT-2026-119516

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of...

PT-2026-118412

gx binres pixelmap table load in the GUIX binary resource theme loader indexes the pixelmap table with a value read verbatim from the resource file and never bounds it against the table size. A crafted theme drives a write of up to roughly 256 KB past the end of the table. The overflowed buffer i...

PT-2026-119133

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.9. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applicatio...

PT-2026-119971

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to...

PT-2026-117973

A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files...

PT-2026-119897

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

PT-2026-118976

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption occurs in the Accessibility component, which could allow a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially craft...

PT-2026-119483

Name of the Vulnerable Software and Affected Versions MySQL Router version 26.7.0 Description An unauthenticated attacker with network access via multiple protocols can compromise MySQL Router. This issue allows the attacker to cause a hang or a frequently repeatable crash, resulting in a complet...

PT-2026-119492

Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite component: Total Compensation Statement. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-119496

Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HCM...

PT-2026-119510

Vulnerability in the Global Order Promising product of Oracle E-Business Suite component: Web Service. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Global Order Promising. Whil...

PT-2026-119476

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: XML. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable...

PT-2026-119509

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Award/PO. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

PT-2026-119298

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability...

PT-2026-118689

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption in Canvas allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Recommendations Update...

PT-2026-118690

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description A use after free issue exists in the Input component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attack...

PT-2026-118691

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption in the Browser component allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page...

PT-2026-118692

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description A use after free issue exists in the Animation component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

PT-2026-118693

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption occurs in the Loader component, which can allow a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML...

PT-2026-118694

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption occurs in the CSS component, which could allow a remote attacker to potentially execute arbitrary code within the sandbox by inducing the user to open a specially...

PT-2026-118695

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption in Views allows a remote attacker to execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-118696

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description A use after free issue exists in the API, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use...

PT-2026-118697

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption occurs in the Paint component, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page...

PT-2026-118698

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description A use after free issue exists in Workers, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use...

PT-2026-118699

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption in the Transactions Platform allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome ...

PT-2026-118700

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption occurs in the HID Human Interface Device component, which allows a remote attacker to execute arbitrary code within the sandbox by enticing a user to visit a specially...

PT-2026-118701

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption occurs in the Sync component, which can be triggered by a remote attacker using a specially crafted HTML page. This allows for the execution of arbitrary code within t...

PT-2026-118703

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description An out of bounds read occurs in Navigation, which could allow a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. An out of bounds...