Daily vulnerability watch

Security News

Latest CVE and advisory summaries, rewritten for quick scanning with credit to the original sources.

Security News
Critical Severity

CVE-2026-77644 critical vulnerability summary

A critical bypass access control vulnerability has been reported in PTC Windchill Risk and Reliability (WRR) Enterprise Edition.

Tenable Newest CVEs Read
Security News
Critical Severity

CVE-2026-77645 critical vulnerability summary

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.

Tenable Newest CVEs Read
Security News
High Severity

CVE-2026-77646 high vulnerability summary

A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.

Tenable Newest CVEs Read
Security News
Critical Severity

CVE-2026-77647 critical vulnerability summary

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of

Tenable Newest CVEs Read
Security News
Medium Severity

CVE-2026-77113 medium vulnerability summary

Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to create or overwrite arbitrary files with the privileges of the executing user via an attacker controlle...

Tenable Newest CVEs Read
Security News
Low Severity

CVE-2026-77648 low vulnerability summary

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing an admin to fetch internal URLs from the Glance service network (aka SSRF), as long as https://...

Tenable Newest CVEs Read
Security News

Multiple Vulnerabilities in Zoom Products

Attackers can exploit multiple vulnerabilities in Zoom products to perform remote code execution, denial of service or disclose sensitive information. Users and administrators of affected products are advised to apply th...

Cyber Security Agency of Singapore Read