CVE-2026-28623

Technical details for CVE-2026-28623 are not provided in the supplied documents; no affected products, root cause, or remediation are described. Monitor PT Security/Android update notes for forthcoming specifics.

CVE-2026-28618

Technical details for CVE-2026-28618 are not publicly provided in the supplied documents. No product/vendor/component/version or impact info is available here; monitor for updates.

CVE-2026-28594

The CVE-2026-28594 entry in this dataset contains placeholder text with no public details in the provided documents. Connected PT-Security items reference CVE-2026-28594 only as part of a patch list, but do not disclose root cause, affected product/version, impact, or fixes. Monitor official disc...

CVE-2026-28638

Technical details for CVE-2026-28638 are not provided in the attached documents. Monitor official advisories/updates for new information and remediation.

CVE-2026-28649

Technical details for CVE-2026-28649 are not provided in the supplied documents; no affected products, root cause, or mitigations are disclosed. Monitor for updates.

CVE-2026-28606

Technical details for CVE-2026-28606 are not publicly available in the provided documents. The connected PT- security entries discuss July 2026 patches and CVE lists, but do not reveal specifics about this CVE. Monitor for updates.

CVE-2026-28602

Technical details for CVE-2026-28602 are not provided in the connected documents. The initial entry is a reserved placeholder. Monitor for updates and forthcoming specifics when they are released.

CVE-2026-28603

Technical details for CVE-2026-28603 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-28642

Technical details for CVE-2026-28642 are not provided in the connected documents. The initial description is reserved/no details. Monitor for updates and additional disclosures from the issuing organization as they become available.

CVE-2026-28639

Technical details for CVE-2026-28639 are not provided in the supplied documents; no affected products, root cause, or fixes are given. Monitor for updates from the connected PT Security entries and the CVE page.

CVE-2026-14480

CVE-2026-14480 affects OpenPLC Runtime v3. An authenticated user can write arbitrary files via the legacy web UI program-upload workflow by storing a attacker-controlled filename (prog_file) that is later used as the destination path. Python os.path.join() honors absolute paths, enabling writes a...

CVE-2026-44383

CVE-2026-44383 concerns Hydro-Québec Le Circuit Electrique charging station backend with insufficient session expiration. The issue allows multiple connections using the same charging station ID, enabling attackers to deploy multiple OCPP clients to overwhelm the backend, impacting availability (...

CVE-2026-42952

CVE-2026-42952 concerns the Hydro-Québec Le Circuit Électrique charging-station backend. The issue is an improper restriction of excessive authentication attempts due to lack of throttling, which could enable a denial-of-service condition. Technical details in the connected records indicate an ex...

CVE-2026-20744

CVE-2026-20744 concerns Hydro-Québec Le Circuit Electrique charging station backend. The issue is an improper access control on the charging station websocket endpoint, allowing connections without authentication and potentially enabling privilege escalation. ICSCERT metrics show critical impact ...

CVE-2026-11913

CVE-2026-11913 concerns a vulnerability in the Drupal module “Mother May I.” The official CVE notes a critical impact (CVSS 9.8) with affected versions listed as wildcards (. ). Connected sources indicate the Drupal project marks the module as unsupported and a fix has not been provided (SA-CONTR...

CVE-2026-11914

Technical details (affected versions, root cause, impact, and available fixes) for CVE-2026-11914 are not publicly provided in the given documents. Monitor for updates from Drupal SA-CONTRIB-2026-046 and related advisories for concrete info.

CVE-2026-11915

The CVE-2026-11915 entry concerns Drupal Brute force attack protection where a vulnerability exists in the Brute force attack protection module affecting versions . . The NVD/NVDC and related records describe the issue as a vulnerability in the Drupal brute-force protection mechanism with impact ...

CVE-2026-15087

CVE-2026-15087 concerns Drupal Clean RESTful. Connected PT-2026-56667 confirms affected versions are Drupal Clean RESTful versions *, i.e., all versions, but details on the exact vulnerability, root cause, exploitability, or fixes are not provided in the connected documents. The related Drupal SA...

CVE-2026-15086

Technical details about CVE-2026-15086 are not publicly available in the provided documents. Monitor for updates from official advisories and vulnerability feeds.

CVE-2026-15089

The CVE-2026-15089 entry concerns a vulnerability in Drupal Commerce guest registration. Affected component: Drupal Commerce guest registration feature; details on affected versions are not provided beyond “. ” in the documents. The CVSS 3.1 base score is listed as 9.1 (CRITICAL) with high confid...