# CVEs published 2026-10-06

1,016 CVEs were published on October 6, 2026: 99 critical, 370 high. Days are UTC.

- [CVE-2026-97674](https://cve.now/CVE-2026-97674.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 8.1, IBM Langflow OSS)
- [CVE-2026-97678](https://cve.now/CVE-2026-97678.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 8.8, IBM Langflow OSS)
- [CVE-2026-97679](https://cve.now/CVE-2026-97679.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 8.8, IBM Langflow OSS)
- [CVE-2026-97680](https://cve.now/CVE-2026-97680.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 8.3, IBM Langflow OSS)
- [CVE-2026-97655](https://cve.now/CVE-2026-97655.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 8.8, IBM Langflow OSS)
- [CVE-2026-97676](https://cve.now/CVE-2026-97676.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 8.8, IBM Langflow OSS)
- [CVE-2026-101329](https://cve.now/CVE-2026-101329.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 6.5, IBM Langflow OSS)
- [CVE-2026-101331](https://cve.now/CVE-2026-101331.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 7.7, IBM Langflow OSS)
- [CVE-2026-103360](https://cve.now/CVE-2026-103360.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 8.1, IBM Langflow OSS)
- [CVE-2026-104334](https://cve.now/CVE-2026-104334.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 9.8, IBM Langflow OSS)
- [CVE-2026-104335](https://cve.now/CVE-2026-104335.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 8.8, IBM Langflow OSS)
- [CVE-2026-106583](https://cve.now/CVE-2026-106583.md): In ssh in OpenSSH before 10.6, a $ or \\ character can occur in a command-line username, leading to injection. (CVSS 2.5, OpenBSD OpenSSH)
- [CVE-2026-80048](https://cve.now/CVE-2026-80048.md): Sssd: sssd-kcm: local denial of service via excessive memory preallocation (CVSS 5.5, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-106509](https://cve.now/CVE-2026-106509.md): Backstage: Improper validation of MkDocs theme configuration in TechDocs (CVSS 7.7, backstage · @backstage plugin-techdocs-node +1)
- [CVE-2026-106508](https://cve.now/CVE-2026-106508.md): Backstage: Potential file exposure through local TechDocs publisher (CVSS 5.3, backstage · @backstage plugin-techdocs-node +1)
- [CVE-2026-106507](https://cve.now/CVE-2026-106507.md): Backstage: TechDocs arbitrary file read via mkdocs snippets (CVSS 5.3, backstage · @backstage/plugin-techdocs-node plugin-techdocs…)
- [CVE-2026-106506](https://cve.now/CVE-2026-106506.md): Backstage: Improper input validation in scaffolder task list ordering (CVSS 5.3, backstage · @backstage plugin-scaffolder-backend +1)
- [CVE-2026-106505](https://cve.now/CVE-2026-106505.md): Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend (CVSS 7.7, backstage · @backstage plugin-techdocs-node +1)
- [CVE-2026-106504](https://cve.now/CVE-2026-106504.md): Backstage: Sensitive information exposure in scaffolder task logs (CVSS 6.5, backstage · @backstage plugin-scaffolder-backend +1)
- [CVE-2026-106503](https://cve.now/CVE-2026-106503.md): Backstage: Scaffolder action input authorization bypass (CVSS 8.1, backstage · @backstage plugin-scaffolder-backend +1)
- [CVE-2026-97626](https://cve.now/CVE-2026-97626.md): Gitea profile feed disclosure bypassing user visibility (CVSS 4.3, Gitea)
- [CVE-2026-96594](https://cve.now/CVE-2026-96594.md): Gitea repository media API stored XSS (CVSS 6.1, Gitea)
- [CVE-2026-89182](https://cve.now/CVE-2026-89182.md): Gitea push-to-create bypass of FORCE\_PRIVATE policy (CVSS 5.4, Gitea)
- [CVE-2026-105268](https://cve.now/CVE-2026-105268.md): Gitea issue attachment API allows changing comment attachments (CVSS 4.3, Gitea)
- [CVE-2026-105267](https://cve.now/CVE-2026-105267.md): Gitea tag delete route deletes releases without release permission (CVSS 8.1, Gitea)
- [CVE-2026-104633](https://cve.now/CVE-2026-104633.md): Gitea migration memory exhaustion from zero page size (CVSS 6.5, Gitea)
- [CVE-2026-101023](https://cve.now/CVE-2026-101023.md): Gitea OAuth2 refresh token grant accepts access tokens (CVSS 9.1, Gitea)
- [CVE-2026-106502](https://cve.now/CVE-2026-106502.md): Backstage: Sensitive information may be exposed in Scaffolder task failure events (CVSS 5.3, backstage · @backstage plugin-scaffolder-backend +1)
- [CVE-2026-106501](https://cve.now/CVE-2026-106501.md): Backstage: Sensitive information exposure in Scaffolder (CVSS 9.6, backstage · @backstage plugin-scaffolder-backend +1)
- [CVE-2026-106500](https://cve.now/CVE-2026-106500.md): Backstage: Improper task state validation in Scaffolder backend (CVSS 8.5, backstage · @backstage plugin-scaffolder-backend +1)
- [CVE-2026-106499](https://cve.now/CVE-2026-106499.md): Backstage: Secret-derived values may be exposed in scaffolder task logs (CVSS 4.9, backstage · @backstage plugin-scaffolder-backend +1)
- [CVE-2026-106498](https://cve.now/CVE-2026-106498.md): Backstage: Improper URL validation in catalog entity placeholder resolution (CVSS 7.7, backstage · @backstage plugin-catalog-backend +1)
- [CVE-2026-106589](https://cve.now/CVE-2026-106589.md): In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privile (CVSS 2.9, OpenBSD OpenSSH)
- [CVE-2026-106497](https://cve.now/CVE-2026-106497.md): Backstage: Inconsistent catalog property permission evaluation (CVSS 4.3, backstage · @backstage plugin-catalog-backend)
- [CVE-2026-97208](https://cve.now/CVE-2026-97208.md): Gitea push mirror API bypass of DISABLE\_NEW\_PUSH policy (CVSS 4.9, Gitea)
- [CVE-2026-106496](https://cve.now/CVE-2026-106496.md): Backstage: Inconsistent enforcement of allowed location types during catalog processing (CVSS 3.1, backstage · @backstage plugin-catalog-backend +1)
- [CVE-2026-86684](https://cve.now/CVE-2026-86684.md): Gitea push mirror local path check uses the repository owner (CVSS 7.1, Gitea)
- [CVE-2026-106588](https://cve.now/CVE-2026-106588.md): In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpect (CVSS 3.1, OpenBSD OpenSSH)
- [CVE-2026-65142](https://cve.now/CVE-2026-65142.md): NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. (CVSS 7.8, NVIDIA Model-Optimizer)
- [CVE-2026-106587](https://cve.now/CVE-2026-106587.md): In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean (CVSS 3.6, OpenBSD OpenSSH)
- [CVE-2026-65122](https://cve.now/CVE-2026-65122.md): NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read. (CVSS 5.5, NVIDIA TensorRT)
- [CVE-2026-106586](https://cve.now/CVE-2026-106586.md): In sshd in OpenSSH before 10.6, the restrict keyword (in authorized\_keys) was supposed to be applicable to tunnel forwarding but was not, a (CVSS 2.5, OpenBSD OpenSSH)
- [CVE-2026-106494](https://cve.now/CVE-2026-106494.md): Backstage: Improper input validation in cloud storage URL readers (CVSS 4.4, backstage · @backstage backend-defaults +1)
- [CVE-2026-106585](https://cve.now/CVE-2026-106585.md): In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly c (CVSS 6.5, OpenBSD OpenSSH)
- [CVE-2026-106493](https://cve.now/CVE-2026-106493.md): Backstage: Cloud storage catalog locations may cross configured storage boundaries (CVSS 3.0, backstage · @backstage plugin-catalog-backend-module-azu… +4)
- [CVE-2026-106492](https://cve.now/CVE-2026-106492.md): Backstage: Improper preservation of access restrictions during service credential delegation (CVSS 7.6, backstage · @backstage backend-defaults +1)
- [CVE-2026-106584](https://cve.now/CVE-2026-106584.md): In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. (CVSS 2.5, OpenBSD OpenSSH)
- [CVE-2026-106491](https://cve.now/CVE-2026-106491.md): Backstage: Improper input validation in proxy-backend (CVSS 6.4, backstage · @backstage plugin-proxy-backend +1)
- [CVE-2026-106490](https://cve.now/CVE-2026-106490.md): Backstage: Improper input validation in TechDocs static content requests (CVSS 6.5, backstage · @backstage plugin-techdocs-backend +1)
- [CVE-2026-106489](https://cve.now/CVE-2026-106489.md): Backstage: Improper authorization enforcement for TechDocs static content (CVSS 6.5, backstage · @backstage plugin-techdocs-backend +1)
- [CVE-2026-106488](https://cve.now/CVE-2026-106488.md): Backstage: Improper authentication in the OIDC provider (CVSS 8.1, backstage · @backstage plugin-auth-backend-module-oidc-p… +1)
- [CVE-2026-104045](https://cve.now/CVE-2026-104045.md): Sssd: sssd: denial of service via race condition in autofs responder (CVSS 4.7, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-106487](https://cve.now/CVE-2026-106487.md): Backstage: Unsupported catalog cluster authentication mode in kubernetes backend (CVSS 3.5, backstage · @backstage plugin-kubernetes-backend +1)
- [CVE-2026-106582](https://cve.now/CVE-2026-106582.md): In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Cr (CVSS 3.7, OpenBSD OpenSSH)
- [CVE-2026-106486](https://cve.now/CVE-2026-106486.md): Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions (CVSS 8.5, backstage · @backstage plugin-scaffolder-backend-module-… +3)
- [CVE-2026-106032](https://cve.now/CVE-2026-106032.md): Server-side request forgery and local file read via unrestricted external OpenAPI reference resolution in Bedrock AgentCore Starter Toolkit agent import (CVSS 5.7, aws bedrock-agentcore-starter-toolkit)
- [CVE-2026-105812](https://cve.now/CVE-2026-105812.md): Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import (CVSS 8.8, aws bedrock-agentcore-starter-toolkit)
- [CVE-2026-106463](https://cve.now/CVE-2026-106463.md): Backstage: Improper authorization in GitLab organizational user ingestion (CVSS 5.4, backstage · @backstage plugin-catalog-backend-module-git… +1)
- [CVE-2026-106462](https://cve.now/CVE-2026-106462.md): Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallback (CVSS 6.4, backstage · @backstage plugin-scaffolder-backend +11)
- [CVE-2026-106555](https://cve.now/CVE-2026-106555.md): In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts. (CVSS 2.2, OpenBSD OpenSSH)
- [CVE-2026-106553](https://cve.now/CVE-2026-106553.md): In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt. (CVSS 2.2, OpenBSD OpenSSH)
- [CVE-2026-106461](https://cve.now/CVE-2026-106461.md): Backstage: Incorrect authorization in scaffolder task listing (CVSS 4.3, backstage · @backstage plugin-scaffolder-backend +1)
- [CVE-2026-106460](https://cve.now/CVE-2026-106460.md): Backstage: Explicit negative email verification can be ignored during shared OAuth profile normalization (CVSS 6.8, backstage · @backstage plugin-auth-node +1)
- [CVE-2026-106552](https://cve.now/CVE-2026-106552.md): In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recu (CVSS 4.2, OpenBSD OpenSSH)
- [CVE-2026-106459](https://cve.now/CVE-2026-106459.md): Backstage: Improper input validation in Sentry scaffolder actions (CVSS 8.5, backstage · @backstage plugin-scaffolder-backend-module-… +1)
- [CVE-2026-106458](https://cve.now/CVE-2026-106458.md): Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates (CVSS 6.5, backstage · @backstage plugin-catalog-backend-module-bit… +1)
- [CVE-2026-106547](https://cve.now/CVE-2026-106547.md): HDF5 heap buffer overflow in H5VM\_array\_fill via crafted fill-value metadata (CVSS 8.5, The HDF Group HDF5)
- [CVE-2026-106457](https://cve.now/CVE-2026-106457.md): Backstage: Insufficient audience validation in the Cloudflare Access auth provider (CVSS 6.8, backstage · @backstage plugin-auth-backend-module-cloudf… +1)
- [CVE-2026-106456](https://cve.now/CVE-2026-106456.md): Backstage: Inconsistent credential enforcement for overlapping proxy routes (CVSS 4.8, backstage · @backstage plugin-proxy-backend +1)
- [CVE-2026-106550](https://cve.now/CVE-2026-106550.md): CVE-2026-106550 (CVSS 7.5, Mozilla Node-convict)
- [CVE-2026-43598](https://cve.now/CVE-2026-43598.md): Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent a (CVSS 7.7, AMD Instinct™ MI210 · AMD Instinct™ MI250 +7)
- [CVE-2026-106455](https://cve.now/CVE-2026-106455.md): Backstage: Improper validation of MkDocs plugin configuration in TechDocs (CVSS 7.7, backstage · @backstage plugin-techdocs-node +1)
- [CVE-2026-105811](https://cve.now/CVE-2026-105811.md): Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS (CVSS 7.1, qnabot-on-aws)
- [CVE-2026-104046](https://cve.now/CVE-2026-104046.md): Sssd: sssd: denial of service via incomplete identity provider authentication requests (CVSS 6.2, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-106062](https://cve.now/CVE-2026-106062.md): Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file (CVSS 7.8, Red Hat Enterprise Linux)
- [CVE-2026-101258](https://cve.now/CVE-2026-101258.md): Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free (CVSS 7.8, Red Hat Enterprise Linux)
- [CVE-2026-19029](https://cve.now/CVE-2026-19029.md): HDF5 scale-offset filter heap buffer over-read via crafted chunk (CVSS 6.8, The HDF Group HDF5)
- [CVE-2026-106454](https://cve.now/CVE-2026-106454.md): Twisted: IMAP wildcardToRegexp() ReDoS (CVSS 4.3, twisted)
- [CVE-2026-106453](https://cve.now/CVE-2026-106453.md): yawkat LZ4 Java: LZ4DecompressorWithLength allocates the unvalidated size from the 4-byte length header, so a 5-byte input triggers a 1 GiB allocation and OutOfMemoryError (CVSS 5.3, yawkat lz4-java · at.yawk.lz4:lz4-java +1)
- [CVE-2026-106452](https://cve.now/CVE-2026-106452.md): yawkat LZ4 Java: LZ4BlockInputStream allocates an unvalidated compressed length from the stream header (CVSS 5.3, yawkat lz4-java · at.yawk.lz4:lz4-java +1)
- [CVE-2026-105244](https://cve.now/CVE-2026-105244.md): Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content (CVSS 5.3, Apache Software Foundation Apache log4net)
- [CVE-2026-105243](https://cve.now/CVE-2026-105243.md): Apache log4net: Oversize EventLogAppender record silently discarded (CVSS 5.3, Apache Software Foundation Apache log4net)
- [CVE-2026-106451](https://cve.now/CVE-2026-106451.md): yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user (CVSS 7.3, yawkat lz4-java · at.yawk.lz4:lz4-java +1)
- [CVE-2026-105242](https://cve.now/CVE-2026-105242.md): Apache log4net: Request validation failure drops the event in the aspnet-request converter (CVSS 5.3, Apache Software Foundation Apache log4net)
- [CVE-2026-105241](https://cve.now/CVE-2026-105241.md): Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch (CVSS 5.3, Apache Software Foundation Apache log4net)
- [CVE-2026-106450](https://cve.now/CVE-2026-106450.md): yawkat LZ4 Java: LZ4FrameInputStream reallocates block buffers for every frame, allowing CPU and GC amplification from small inputs (CVSS 5.3, yawkat lz4-java · at.yawk.lz4:lz4-java +1)
- [CVE-2026-105240](https://cve.now/CVE-2026-105240.md): Apache log4net: NUL character truncates OutputDebugStringAppender records (CVSS 5.3, Apache Software Foundation Apache log4net)
- [CVE-2026-105239](https://cve.now/CVE-2026-105239.md): Apache log4net: NUL character truncates EventLogAppender records (CVSS 5.3, Apache Software Foundation Apache log4net)
- [CVE-2026-106449](https://cve.now/CVE-2026-106449.md): yawkat LZ4 Java: LZ4BlockInputStream with stopOnEmptyBlock=false recurses once per empty block, causing StackOverflowError (CVSS 3.7, yawkat lz4-java · at.yawk.lz4:lz4-java +1)
- [CVE-2026-106448](https://cve.now/CVE-2026-106448.md): StableLib: Prototype poisoning via \`\_\_proto\_\_\` map keys in CBOR decoding (CVSS 8.9, stablelib · @stablelib/cbor)
- [CVE-2026-105111](https://cve.now/CVE-2026-105111.md): Apache Commons BCEL: Class2HTML emits unescaped class strings, enabling stored XSS (CVSS 4.7, Apache Software Foundation Apache Commons BCEL)
- [CVE-2026-106447](https://cve.now/CVE-2026-106447.md): StableLib: Stack exhaustion denial of service via deeply nested CBOR arrays, maps, or tags (CVSS 8.7, stablelib · @stablelib/cbor)
- [CVE-2026-94114](https://cve.now/CVE-2026-94114.md): Apache Commons BCEL: Class repositories cache class files under their self-declared names, enabling cache poisoning (CVSS 5.9, Apache Software Foundation Apache Commons BCEL)
- [CVE-2026-106446](https://cve.now/CVE-2026-106446.md): Handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams) (CVSS 9.8, handlebars-lang handlebars.js · handlebars)
- [CVE-2026-102165](https://cve.now/CVE-2026-102165.md): Security Advisory 0198 (CVSS 7.5, Arista Networks Wi-Fi Access Points)
- [CVE-2026-102167](https://cve.now/CVE-2026-102167.md): Security Advisory 0197 (CVSS 7.5, Arista Networks Wi-Fi Access Points)
- [CVE-2026-102164](https://cve.now/CVE-2026-102164.md): Security Advisory 0196 (CVSS 3.1, Arista Networks Wi-Fi Access Points)
- [CVE-2026-102163](https://cve.now/CVE-2026-102163.md): Security Advisory 0195 (CVSS 8.8, Arista Networks Wi-Fi Access Points)
- [CVE-2026-102169](https://cve.now/CVE-2026-102169.md): Security Advisory 0194 (CVSS 6.5, Arista Networks Wi-Fi Access Points)
- [CVE-2026-102168](https://cve.now/CVE-2026-102168.md): Security Advisory 0194 (CVSS 6.5, Arista Networks Wi-Fi Access Points)
- [CVE-2026-102162](https://cve.now/CVE-2026-102162.md): Security Advisory 0193 (CVSS 8.8, Arista Networks Wi-Fi Access Points)
- [CVE-2026-101157](https://cve.now/CVE-2026-101157.md): Security Advisory 0192 (CVSS 8.7, Arista Networks CloudVision CUE)
- [CVE-2026-101156](https://cve.now/CVE-2026-101156.md): Security Advisory 0192 (CVSS 8.4, Arista Networks CloudVision CUE)
- [CVE-2026-102156](https://cve.now/CVE-2026-102156.md): Security Advisory 0191 (CVSS 6.8, Arista Networks CloudVision CUE)
- [CVE-2026-102161](https://cve.now/CVE-2026-102161.md): Security Advisory 0190 (CVSS 8.8, Arista Networks CloudVision CUE)
- [CVE-2026-102160](https://cve.now/CVE-2026-102160.md): Security Advisory 0190 (CVSS 7.2, Arista Networks CloudVision CUE)
- [CVE-2026-102159](https://cve.now/CVE-2026-102159.md): Security Advisory 0190 (CVSS 9.8, Arista Networks CloudVision CUE)
- [CVE-2026-102158](https://cve.now/CVE-2026-102158.md): Security Advisory 0190 (CVSS 6.5, Arista Networks CloudVision CUE)
- [CVE-2026-102157](https://cve.now/CVE-2026-102157.md): Security Advisory 0190 (CVSS 5.9, Arista Networks CloudVision CUE)
- [CVE-2026-102155](https://cve.now/CVE-2026-102155.md): Security Advisory 0190 (CVSS 8.5, Arista Networks CloudVision CUE)
- [CVE-2026-106445](https://cve.now/CVE-2026-106445.md): Handlebars: JavaScript Injection via Own Property Check Bypass (CVSS 9.2, handlebars-lang handlebars.js · handlebars)
- [CVE-2026-101155](https://cve.now/CVE-2026-101155.md): Security Advisory 0189 (CVSS 9.1, Arista Networks CloudVision Portal)
- [CVE-2026-101154](https://cve.now/CVE-2026-101154.md): Security Advisory 0189 (CVSS 7.2, Arista Networks CloudVision Portal)
- [CVE-2026-101153](https://cve.now/CVE-2026-101153.md): Security Advisory 0188 (CVSS 8.0, Arista Networks CloudVision Portal · Arista Networks CloudV…)
- [CVE-2026-101152](https://cve.now/CVE-2026-101152.md): Security Advisory 0187 (CVSS 8.0, Arista Networks CloudVision Portal)
- [CVE-2026-101151](https://cve.now/CVE-2026-101151.md): Security Advisory 0187 (CVSS 4.3, Arista Networks CloudVision Portal)
- [CVE-2026-101150](https://cve.now/CVE-2026-101150.md): Security Advisory 0186 (CVSS 4.1, Arista Networks CloudVision Portal)
- [CVE-2026-101149](https://cve.now/CVE-2026-101149.md): Security Advisory 0186 (CVSS 4.1, Arista Networks CloudVision Portal)
- [CVE-2026-101158](https://cve.now/CVE-2026-101158.md): Security Advisory 0185 (CVSS 8.4, Arista Networks CloudVision Portal)
- [CVE-2026-106063](https://cve.now/CVE-2026-106063.md): Gimp: gimp: heap buffer overflow in dicom export on oversized image dimensions (CVSS 6.3, Red Hat Enterprise Linux)
- [CVE-2026-104048](https://cve.now/CVE-2026-104048.md): Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation (CVSS 6.8, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-104047](https://cve.now/CVE-2026-104047.md): Sssd: sssd: information disclosure via query injection in entra id lookups (CVSS 5.3, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-73278](https://cve.now/CVE-2026-73278.md): Gitea WebAuthn bypass during OAuth and OIDC sign-in (CVSS 9.8, Gitea)
- [CVE-2026-103009](https://cve.now/CVE-2026-103009.md): Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosure (CVSS 7.1, Elasticsearch)
- [CVE-2026-103008](https://cve.now/CVE-2026-103008.md): Uncontrolled Recursion in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-103007](https://cve.now/CVE-2026-103007.md): Incorrect Authorization in Elasticsearch Leading to Privilege Escalation (CVSS 7.2, Elasticsearch)
- [CVE-2026-103006](https://cve.now/CVE-2026-103006.md): Uncontrolled Recursion in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-103005](https://cve.now/CVE-2026-103005.md): Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-102413](https://cve.now/CVE-2026-102413.md): Uncaught Exception in Elastic Endpoint Leading to Denial of Service (CVSS 6.2, Elastic Agent and Elastic Defend)
- [CVE-2026-102412](https://cve.now/CVE-2026-102412.md): Incorrect Authorization in Kibana Leading to Sensitive Information Disclosure (CVSS 6.5, Elastic Kibana · elk +1)
- [CVE-2026-102411](https://cve.now/CVE-2026-102411.md): Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-102410](https://cve.now/CVE-2026-102410.md): Missing Authorization in Kibana Leading to Information Disclosure (CVSS 4.3, Elastic Kibana · elk +1)
- [CVE-2026-102409](https://cve.now/CVE-2026-102409.md): Uncontrolled Recursion in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-102408](https://cve.now/CVE-2026-102408.md): Inefficient Regular Expression Complexity in Elasticsearch Leading to Denial of Service (CVSS 4.3, Elasticsearch)
- [CVE-2026-102407](https://cve.now/CVE-2026-102407.md): Incorrect Authorization in Elasticsearch Leading to Unauthorized Data Stream Modification (CVSS 5.4, Elasticsearch)
- [CVE-2026-102406](https://cve.now/CVE-2026-102406.md): Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception (CVSS 8.8, Elastic Kibana · elk +1)
- [CVE-2026-102404](https://cve.now/CVE-2026-102404.md): Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-96589](https://cve.now/CVE-2026-96589.md): Gitea private repository access retained after rejected transfer (CVSS 4.3, Gitea)
- [CVE-2026-96580](https://cve.now/CVE-2026-96580.md): Gitea Actions memory exhaustion through large static matrices (CVSS 7.5, Gitea)
- [CVE-2026-96404](https://cve.now/CVE-2026-96404.md): Gitea installer authentication bypass for existing accounts (CVSS 8.1, Gitea)
- [CVE-2026-96400](https://cve.now/CVE-2026-96400.md): Gitea migration SSRF to reserved addresses through ALLOWED\_DOMAINS (CVSS 4.3, Gitea)
- [CVE-2026-96399](https://cve.now/CVE-2026-96399.md): Gitea denial of service through external issue tracker patterns (CVSS 7.5, Gitea)
- [CVE-2026-95112](https://cve.now/CVE-2026-95112.md): Gitea issue reference parsing CPU exhaustion (CVSS 6.5, Gitea)
- [CVE-2026-94205](https://cve.now/CVE-2026-94205.md): Gitea fork workflow approval bypass through maintainer-triggered events (CVSS 9.8, Gitea)
- [CVE-2026-79960](https://cve.now/CVE-2026-79960.md): Gitea deploy key pushes acting as the repository owner (CVSS 7.1, Gitea)
- [CVE-2026-70357](https://cve.now/CVE-2026-70357.md): Gitea repository migration SSRF through DNS rebinding (CVSS 7.5, Gitea)
- [CVE-2026-104636](https://cve.now/CVE-2026-104636.md): Gitea SSRF through Git HTTP redirects in mirrors and fetches (CVSS 7.5, Gitea)
- [CVE-2026-76061](https://cve.now/CVE-2026-76061.md): Cri-o: cri-o: bind\_mount\_prefix intermediate-symlink prefix bypass (CVSS 5.5, cri-o · Red Hat OpenShift Container Platform)
- [CVE-2026-103504](https://cve.now/CVE-2026-103504.md): Gitea API team demotion not applied to unit permissions (CVSS 8.1, Gitea)
- [CVE-2026-95106](https://cve.now/CVE-2026-95106.md): Gitea review and execution mismatch through duplicate tree entries (CVSS 9.1, Gitea)
- [CVE-2026-89430](https://cve.now/CVE-2026-89430.md): Gitea push mirror SSRF and forced writes to internal Git hosts (CVSS 8.1, Gitea)
- [CVE-2026-103670](https://cve.now/CVE-2026-103670.md): Gitea trusted workflow cancellation by unapproved fork runs (CVSS 7.5, Gitea)
- [CVE-2026-103667](https://cve.now/CVE-2026-103667.md): Gitea container registry stored XSS through blob media type (CVSS 5.4, Gitea)
- [CVE-2026-101029](https://cve.now/CVE-2026-101029.md): Gitea migration and pull mirror SSRF through multi-answer DNS (CVSS 4.3, Gitea)
- [CVE-2026-101027](https://cve.now/CVE-2026-101027.md): Gitea migration SSRF through ALLOWED\_DOMAINS address check bypass (CVSS 7.7, Gitea)
- [CVE-2026-104626](https://cve.now/CVE-2026-104626.md): Gitea fork workflow job revival through later approval (CVSS 8.8, Gitea)
- [CVE-2026-103059](https://cve.now/CVE-2026-103059.md): Gitea built-in SSH server authentication bypass through key case folding (CVSS 9.1, Gitea)
- [CVE-2026-104632](https://cve.now/CVE-2026-104632.md): Gitea fork workflow approval bypass through cancel and rerun (CVSS 8.8, Gitea)
- [CVE-2026-79818](https://cve.now/CVE-2026-79818.md): Authentication Bypass in the API Interface Allows Unauthorized Information Disclosure in ClearPass Policy Manager (CVSS 5.3, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79817](https://cve.now/CVE-2026-79817.md): Local Disclosure of Sensitive Information in HPE Networking ClearPass Policy Manager Client Software (CVSS 5.5, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79816](https://cve.now/CVE-2026-79816.md): Unauthenticated DOM-Based Cross-Site Scripting (XSS) Vulnerability in the ClearPass Policy Manager Client Interface (CVSS 5.4, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79815](https://cve.now/CVE-2026-79815.md): Authenticated Command Injection Vulnerability in the ClearPass Policy Manager OnGuard Agent (CVSS 6.5, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79814](https://cve.now/CVE-2026-79814.md): Local Arbitrary File Write Leading to Local Privilege Escalation in ClearPass Policy Manager OnGuard Agent (CVSS 6.7, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79813](https://cve.now/CVE-2026-79813.md): Local Privilege Escalation in ClearPass Client Software (CVSS 6.7, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79812](https://cve.now/CVE-2026-79812.md): Authenticated Local Denial-of-Service Vulnerability in the OnGuard Agent of ClearPass Policy Manager (CVSS 6.1, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79811](https://cve.now/CVE-2026-79811.md): Authenticated SQL Injection allows Remote Code Execution in ClearPass Policy Manager API (CVSS 7.2, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79810](https://cve.now/CVE-2026-79810.md): Authenticated Remote Code Execution Vulnerabilities in HPE Networking ClearPass Policy Manager (CVSS 7.2, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79809](https://cve.now/CVE-2026-79809.md): Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass (CVSS 7.3, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79808](https://cve.now/CVE-2026-79808.md): Local Authenticated Buffer Overflow Vulnerability in the ClearPass Policy Manager OnGuard Agent (CVSS 7.8, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79807](https://cve.now/CVE-2026-79807.md): Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Windows Client Software (CVSS 7.8, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79806](https://cve.now/CVE-2026-79806.md): Authenticated Local Privilege Escalation in ClearPass Policy Manager OnGuard Linux Agent (CVSS 7.8, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79805](https://cve.now/CVE-2026-79805.md): Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager (CVSS 9.8, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79803](https://cve.now/CVE-2026-79803.md): Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manager API (CVSS 8.8, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79802](https://cve.now/CVE-2026-79802.md): Command Injection Vulnerability in the ClearPass Policy Manager Client Software (CVSS 8.8, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79801](https://cve.now/CVE-2026-79801.md): Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent (CVSS 9.8, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79800](https://cve.now/CVE-2026-79800.md): Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager (CVSS 8.8, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79799](https://cve.now/CVE-2026-79799.md): Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in ClearPass Policy Manager Web-Based Management Interface (CVSS 8.8, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79798](https://cve.now/CVE-2026-79798.md): Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface (CVSS 9.9, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79797](https://cve.now/CVE-2026-79797.md): Improper Access Control in HPE Networking ClearPass Android Client Application (CVSS 8.8, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79796](https://cve.now/CVE-2026-79796.md): Authentication Bypass Vulnerabilities in ClearPass Policy Manager (CVSS 9.8, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-79794](https://cve.now/CVE-2026-79794.md): Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface (CVSS 9.1, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-76754](https://cve.now/CVE-2026-76754.md): Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager (CVSS 9.8, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-76753](https://cve.now/CVE-2026-76753.md): Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager (CVSS 9.8, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-76752](https://cve.now/CVE-2026-76752.md): Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative Access (CVSS 9.8, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-76751](https://cve.now/CVE-2026-76751.md): Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution (CVSS 9.8, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-76750](https://cve.now/CVE-2026-76750.md): Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Manager (CVSS 9.8, Hewlett Packard Enterprise (HPE) ClearPass Policy Manager)
- [CVE-2026-76749](https://cve.now/CVE-2026-76749.md): Unauthenticated Sensitive Information Disclosure in AOS-S (CVSS 6.5, Hewlett Packard Enterprise (HPE) AOS-Switch)
- [CVE-2026-76748](https://cve.now/CVE-2026-76748.md): Authenticated Privilege Escalation Vulnerability in the API of AOS-S (CVSS 8.8, Hewlett Packard Enterprise (HPE) AOS-Switch)
- [CVE-2026-76747](https://cve.now/CVE-2026-76747.md): Unauthenticated Buffer Overflow Vulnerabilities lead to Information Disclosure in AOS-S (CVSS 9.1, Hewlett Packard Enterprise (HPE) AOS-Switch)
- [CVE-2026-76746](https://cve.now/CVE-2026-76746.md): Unauthenticated Adjacent Buffer Overflow Vulnerability Leading to Information Disclosure in AOS-S (CVSS 9.3, Hewlett Packard Enterprise (HPE) AOS-Switch)
- [CVE-2026-76745](https://cve.now/CVE-2026-76745.md): Unauthenticated Adjacent Memory Corruption Vulnerabilities Leading to Remote Code Execution in AOS-S (CVSS 9.6, Hewlett Packard Enterprise (HPE) AOS-Switch)
- [CVE-2026-76744](https://cve.now/CVE-2026-76744.md): Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-S (CVSS 9.8, Hewlett Packard Enterprise (HPE) AOS-Switch)
- [CVE-2026-76743](https://cve.now/CVE-2026-76743.md): Authentication Bypass Vulnerability in the Management Interface of AOS-S (CVSS 9.8, Hewlett Packard Enterprise (HPE) AOS-Switch)
- [CVE-2026-76742](https://cve.now/CVE-2026-76742.md): Authentication Bypass in the Web Management Interface of AOS-S (CVSS 9.8, Hewlett Packard Enterprise (HPE) AOS-Switch)
- [CVE-2026-76741](https://cve.now/CVE-2026-76741.md): Authenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-S (CVSS 6.5, Hewlett Packard Enterprise (HPE) AOS-Switch)
- [CVE-2026-106444](https://cve.now/CVE-2026-106444.md): Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates (CVSS 4.7, handlebars-lang handlebars.js · handlebars)
- [CVE-2026-106513](https://cve.now/CVE-2026-106513.md): MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change (CVSS 6.9, MISP)
- [CVE-2026-106443](https://cve.now/CVE-2026-106443.md): WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE (CVSS 8.8, Kozea WeasyPrint · weasyprint)
- [CVE-2026-96890](https://cve.now/CVE-2026-96890.md): Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed requests to attacker-controlled internal hosts (CVSS 8.7, GitHub Enterprise Server)
- [CVE-2026-103620](https://cve.now/CVE-2026-103620.md): Missing authorization in GitHub Enterprise Server allowed repository writers to replace default branches via GraphQL (CVSS 6.0, GitHub Enterprise Server)
- [CVE-2026-106442](https://cve.now/CVE-2026-106442.md): Hydra instantiate target blacklist bypasses permit code execution (CVSS 7.8, hydra-ecosystem hydra · hydra-core)
- [CVE-2026-106441](https://cve.now/CVE-2026-106441.md): Hydra logging configuration permits unsafe callable resolution (CVSS 7.8, hydra-ecosystem hydra · hydra-core)
- [CVE-2026-103778](https://cve.now/CVE-2026-103778.md): Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vulnerability. (CVSS 6.2, Dell Command | Configure)
- [CVE-2026-106511](https://cve.now/CVE-2026-106511.md): CVE-2026-106511 (CVSS 9.8, MultiversX Labs S.R.L. multisig-improved)
- [CVE-2026-106440](https://cve.now/CVE-2026-106440.md): Hydra: Optuna custom\_search\_space can resolve and execute untrusted callables via get\_method (CVSS 7.8, hydra-ecosystem hydra · hydra-optuna-sweeper)
- [CVE-2026-104073](https://cve.now/CVE-2026-104073.md): NetBox 2.9.5 \< 4.7.0 Session Hijacking via Custom Links (CVSS 6.9, netbox-community netbox)
- [CVE-2026-82162](https://cve.now/CVE-2026-82162.md): Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. (CVSS 7.4, Dell Command | Configure)
- [CVE-2026-106439](https://cve.now/CVE-2026-106439.md): Hydra: Mutable instantiate policy sets allow target blocklist bypass (CVSS 8.5, hydra-ecosystem hydra · hydra-core)
- [CVE-2026-106512](https://cve.now/CVE-2026-106512.md): MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSS (CVSS 8.4, MISP sachertortephp)
- [CVE-2026-70414](https://cve.now/CVE-2026-70414.md): Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. (CVSS 5.5, Dell Command | Configure)
- [CVE-2026-106269](https://cve.now/CVE-2026-106269.md): Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome)
- [CVE-2026-106234](https://cve.now/CVE-2026-106234.md): Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially exe (CVSS 9.6, Google Chrome)
- [CVE-2026-106355](https://cve.now/CVE-2026-106355.md): Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the rende (CVSS 5.3, Google Chrome)
- [CVE-2026-106272](https://cve.now/CVE-2026-106272.md): UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social enginee (CVSS 5.4, Google Chrome)
- [CVE-2026-106345](https://cve.now/CVE-2026-106345.md): Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proce (CVSS 4.2, Google Chrome)
- [CVE-2026-106310](https://cve.now/CVE-2026-106310.md): Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer pr (CVSS 6.5, Google Chrome)
- [CVE-2026-106251](https://cve.now/CVE-2026-106251.md): UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering (CVSS 5.4, Google Chrome)
- [CVE-2026-106236](https://cve.now/CVE-2026-106236.md): UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social enginee (CVSS 5.4, Google Chrome)
- [CVE-2026-106334](https://cve.now/CVE-2026-106334.md): Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensi (CVSS 8.8, Google Chrome)
- [CVE-2026-106294](https://cve.now/CVE-2026-106294.md): Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restric (CVSS 9.1, Google Chrome)
- [CVE-2026-106390](https://cve.now/CVE-2026-106390.md): Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sen (CVSS 4.3, Google Chrome)
- [CVE-2026-106325](https://cve.now/CVE-2026-106325.md): Incorrect reference resolution in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to le (CVSS 4.3, Google Chrome)
- [CVE-2026-106385](https://cve.now/CVE-2026-106385.md): Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially (CVSS 5.3, Google Chrome)
- [CVE-2026-106316](https://cve.now/CVE-2026-106316.md): UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering (CVSS 5.4, Google Chrome)
- [CVE-2026-106195](https://cve.now/CVE-2026-106195.md): Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access re (CVSS 9.1, Google Chrome)
- [CVE-2026-106320](https://cve.now/CVE-2026-106320.md): Use of released resource in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to (CVSS 4.2, Google Chrome)
- [CVE-2026-106339](https://cve.now/CVE-2026-106339.md): Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process (CVSS 3.1, Google Chrome)
- [CVE-2026-106413](https://cve.now/CVE-2026-106413.md): Race condition in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoo (CVSS 4.2, Google Chrome)
- [CVE-2026-106256](https://cve.now/CVE-2026-106256.md): Information leak in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering (CVSS 8.8, Google Chrome)
- [CVE-2026-106371](https://cve.now/CVE-2026-106371.md): Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain s (CVSS 8.8, Google Chrome)
- [CVE-2026-106343](https://cve.now/CVE-2026-106343.md): Improper state validation in Autofill AI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI element (CVSS 5.4, Google Chrome)
- [CVE-2026-106418](https://cve.now/CVE-2026-106418.md): Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass w (CVSS 6.5, Google Chrome)
- [CVE-2026-106305](https://cve.now/CVE-2026-106305.md): UI misrepresentation in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a cr (CVSS 5.4, Google Chrome)
- [CVE-2026-106288](https://cve.now/CVE-2026-106288.md): Missing authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass s (CVSS 5.4, Google Chrome)
- [CVE-2026-106350](https://cve.now/CVE-2026-106350.md): Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a c (CVSS 8.8, Google Chrome)
- [CVE-2026-106270](https://cve.now/CVE-2026-106270.md): Incorrect authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a craft (CVSS 5.4, Google Chrome)
- [CVE-2026-106331](https://cve.now/CVE-2026-106331.md): Improper input validation in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to b (CVSS 6.5, Google Chrome)
- [CVE-2026-106237](https://cve.now/CVE-2026-106237.md): Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTM (CVSS 9.6, Google Chrome)
- [CVE-2026-106368](https://cve.now/CVE-2026-106368.md): UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafte (CVSS 5.4, Google Chrome)
- [CVE-2026-106179](https://cve.now/CVE-2026-106179.md): UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted (CVSS 5.4, Google Chrome)
- [CVE-2026-106380](https://cve.now/CVE-2026-106380.md): UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI eleme (CVSS 5.4, Google Chrome)
- [CVE-2026-106374](https://cve.now/CVE-2026-106374.md): Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr (CVSS 8.8, Google Chrome)
- [CVE-2026-106249](https://cve.now/CVE-2026-106249.md): Incorrect authorization in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive info (CVSS 8.8, Google Chrome)
- [CVE-2026-106296](https://cve.now/CVE-2026-106296.md): Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineerin (CVSS 5.4, Google Chrome)
- [CVE-2026-106259](https://cve.now/CVE-2026-106259.md): Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restr (CVSS 5.4, Google Chrome)
- [CVE-2026-106221](https://cve.now/CVE-2026-106221.md): Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to (CVSS 8.3, Google Chrome)
- [CVE-2026-106417](https://cve.now/CVE-2026-106417.md): Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside th (CVSS 9.6, Google Chrome)
- [CVE-2026-106220](https://cve.now/CVE-2026-106220.md): Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafte (CVSS 8.8, Google Chrome)
- [CVE-2026-106285](https://cve.now/CVE-2026-106285.md): UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to by (CVSS 5.4, Google Chrome)
- [CVE-2026-106264](https://cve.now/CVE-2026-106264.md): Missing authorization in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to (CVSS 5.4, Google Chrome)
- [CVE-2026-106399](https://cve.now/CVE-2026-106399.md): Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially rea (CVSS 3.3, Google Chrome)
- [CVE-2026-106192](https://cve.now/CVE-2026-106192.md): Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via ph (CVSS 4.6, Google Chrome)
- [CVE-2026-106247](https://cve.now/CVE-2026-106247.md): Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to poten (CVSS 8.3, Google Chrome)
- [CVE-2026-106186](https://cve.now/CVE-2026-106186.md): Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to pot (CVSS 8.6, Google Chrome)
- [CVE-2026-106422](https://cve.now/CVE-2026-106422.md): Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted H (CVSS 4.3, Google Chrome)
- [CVE-2026-106299](https://cve.now/CVE-2026-106299.md): Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer pro (CVSS 5.4, Google Chrome)
- [CVE-2026-106199](https://cve.now/CVE-2026-106199.md): Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the ren (CVSS 8.2, Google Chrome)
- [CVE-2026-106275](https://cve.now/CVE-2026-106275.md): Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the san (CVSS 4.7, Google Chrome)
- [CVE-2026-106362](https://cve.now/CVE-2026-106362.md): Missing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass (CVSS 6.5, Google Chrome)
- [CVE-2026-106260](https://cve.now/CVE-2026-106260.md): Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak (CVSS 4.3, Google Chrome)
- [CVE-2026-106297](https://cve.now/CVE-2026-106297.md): Incorrect authorization in Scheduling in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a cr (CVSS 4.3, Google Chrome)
- [CVE-2026-106287](https://cve.now/CVE-2026-106287.md): Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network t (CVSS 4.3, Google Chrome)
- [CVE-2026-106252](https://cve.now/CVE-2026-106252.md): Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-106427](https://cve.now/CVE-2026-106427.md): Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions i (CVSS 5.4, Google Chrome)
- [CVE-2026-106306](https://cve.now/CVE-2026-106306.md): Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions vi (CVSS 5.4, Google Chrome)
- [CVE-2026-106394](https://cve.now/CVE-2026-106394.md): Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-ori (CVSS 4.3, Google Chrome)
- [CVE-2026-106187](https://cve.now/CVE-2026-106187.md): Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proc (CVSS 4.2, Google Chrome)
- [CVE-2026-106309](https://cve.now/CVE-2026-106309.md): Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive informa (CVSS 8.8, Google Chrome)
- [CVE-2026-106250](https://cve.now/CVE-2026-106250.md): Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass sys (CVSS 5.4, Google Chrome)
- [CVE-2026-106191](https://cve.now/CVE-2026-106191.md): Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to (CVSS 8.3, Google Chrome)
- [CVE-2026-106312](https://cve.now/CVE-2026-106312.md): Missing authorization in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain se (CVSS 6.5, Google Chrome)
- [CVE-2026-106353](https://cve.now/CVE-2026-106353.md): Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineerin (CVSS 6.5, Google Chrome)
- [CVE-2026-106359](https://cve.now/CVE-2026-106359.md): Confused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin poli (CVSS 4.3, Google Chrome)
- [CVE-2026-106344](https://cve.now/CVE-2026-106344.md): Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proc (CVSS 5.4, Google Chrome)
- [CVE-2026-106317](https://cve.now/CVE-2026-106317.md): UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via (CVSS 5.4, Google Chrome)
- [CVE-2026-106338](https://cve.now/CVE-2026-106338.md): UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address ba (CVSS 5.4, Google Chrome)
- [CVE-2026-106276](https://cve.now/CVE-2026-106276.md): UI misrepresentation in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI (CVSS 5.4, Google Chrome)
- [CVE-2026-106340](https://cve.now/CVE-2026-106340.md): Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensiti (CVSS 4.6, Google Chrome)
- [CVE-2026-106409](https://cve.now/CVE-2026-106409.md): Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had comprom (CVSS 8.3, Google Chrome)
- [CVE-2026-106341](https://cve.now/CVE-2026-106341.md): Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sand (CVSS 8.8, Google Chrome)
- [CVE-2026-106372](https://cve.now/CVE-2026-106372.md): Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outsid (CVSS 9.6, Google Chrome)
- [CVE-2026-106254](https://cve.now/CVE-2026-106254.md): Information leak in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information vi (CVSS 5.1, Google Chrome)
- [CVE-2026-106210](https://cve.now/CVE-2026-106210.md): Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted (CVSS 3.1, Google Chrome)
- [CVE-2026-106321](https://cve.now/CVE-2026-106321.md): Information leak in Editing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitiv (CVSS 4.3, Google Chrome)
- [CVE-2026-106207](https://cve.now/CVE-2026-106207.md): Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr (CVSS 8.8, Google Chrome)
- [CVE-2026-106384](https://cve.now/CVE-2026-106384.md): Missing authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer pr (CVSS 6.5, Google Chrome)
- [CVE-2026-106351](https://cve.now/CVE-2026-106351.md): Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker who had compromised the r (CVSS 5.3, Google Chrome)
- [CVE-2026-106386](https://cve.now/CVE-2026-106386.md): Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a (CVSS 6.5, Google Chrome)
- [CVE-2026-106183](https://cve.now/CVE-2026-106183.md): Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive info (CVSS 5.9, Google Chrome)
- [CVE-2026-106404](https://cve.now/CVE-2026-106404.md): Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer pro (CVSS 6.5, Google Chrome)
- [CVE-2026-106263](https://cve.now/CVE-2026-106263.md): Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypas (CVSS 6.5, Google Chrome)
- [CVE-2026-106337](https://cve.now/CVE-2026-106337.md): UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafte (CVSS 5.4, Google Chrome)
- [CVE-2026-106352](https://cve.now/CVE-2026-106352.md): Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obt (CVSS 8.8, Google Chrome)
- [CVE-2026-106295](https://cve.now/CVE-2026-106295.md): Incorrect authorization in Unbounded Element in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the rende (CVSS 4.2, Google Chrome)
- [CVE-2026-106330](https://cve.now/CVE-2026-106330.md): Information leak in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML (CVSS 4.3, Google Chrome)
- [CVE-2026-106401](https://cve.now/CVE-2026-106401.md): Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside (CVSS 9.6, Google Chrome)
- [CVE-2026-106304](https://cve.now/CVE-2026-106304.md): Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a craft (CVSS 4.7, Google Chrome)
- [CVE-2026-106395](https://cve.now/CVE-2026-106395.md): Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sa (CVSS 4.7, Google Chrome)
- [CVE-2026-106271](https://cve.now/CVE-2026-106271.md): Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process (CVSS 8.1, Google Chrome)
- [CVE-2026-106388](https://cve.now/CVE-2026-106388.md): Missing authorization in DataTransfer in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer pro (CVSS 5.3, Google Chrome)
- [CVE-2026-106398](https://cve.now/CVE-2026-106398.md): Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted H (CVSS 4.3, Google Chrome)
- [CVE-2026-106212](https://cve.now/CVE-2026-106212.md): Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtai (CVSS 8.8, Google Chrome)
- [CVE-2026-106307](https://cve.now/CVE-2026-106307.md): Incorrect authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proces (CVSS 6.5, Google Chrome)
- [CVE-2026-106348](https://cve.now/CVE-2026-106348.md): Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted (CVSS 6.5, Google Chrome)
- [CVE-2026-106375](https://cve.now/CVE-2026-106375.md): Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside t (CVSS 9.6, Google Chrome)
- [CVE-2026-106360](https://cve.now/CVE-2026-106360.md): Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTM (CVSS 4.3, Google Chrome)
- [CVE-2026-106262](https://cve.now/CVE-2026-106262.md): Incomplete cleanup in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proces (CVSS 4.2, Google Chrome)
- [CVE-2026-106292](https://cve.now/CVE-2026-106292.md): Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to poten (CVSS 8.3, Google Chrome)
- [CVE-2026-106301](https://cve.now/CVE-2026-106301.md): Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proce (CVSS 8.1, Google Chrome)
- [CVE-2026-106373](https://cve.now/CVE-2026-106373.md): Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the (CVSS 8.8, Google Chrome)
- [CVE-2026-106403](https://cve.now/CVE-2026-106403.md): Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer (CVSS 8.1, Google Chrome)
- [CVE-2026-106336](https://cve.now/CVE-2026-106336.md): Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HT (CVSS 4.3, Google Chrome)
- [CVE-2026-106391](https://cve.now/CVE-2026-106391.md): Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the (CVSS 4.2, Google Chrome)
- [CVE-2026-106232](https://cve.now/CVE-2026-106232.md): UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI (CVSS 5.4, Google Chrome)
- [CVE-2026-106229](https://cve.now/CVE-2026-106229.md): UI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass (CVSS 5.4, Google Chrome)
- [CVE-2026-106226](https://cve.now/CVE-2026-106226.md): Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer (CVSS 4.2, Google Chrome)
- [CVE-2026-106367](https://cve.now/CVE-2026-106367.md): Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering (CVSS 8.4, Google Chrome)
- [CVE-2026-106230](https://cve.now/CVE-2026-106230.md): Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromise (CVSS 5.3, Google Chrome)
- [CVE-2026-106213](https://cve.now/CVE-2026-106213.md): Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a cra (CVSS 4.3, Google Chrome)
- [CVE-2026-106205](https://cve.now/CVE-2026-106205.md): Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the r (CVSS 8.1, Google Chrome)
- [CVE-2026-106400](https://cve.now/CVE-2026-106400.md): Clickjacking in Messages in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to sp (CVSS 5.4, Google Chrome)
- [CVE-2026-106387](https://cve.now/CVE-2026-106387.md): Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to (CVSS 8.8, Google Chrome)
- [CVE-2026-106328](https://cve.now/CVE-2026-106328.md): Incorrect authorization in PDF in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering (CVSS 5.9, Google Chrome)
- [CVE-2026-106216](https://cve.now/CVE-2026-106216.md): Cross-site request forgery in ReadingList in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social (CVSS 5.4, Google Chrome)
- [CVE-2026-106209](https://cve.now/CVE-2026-106209.md): UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to (CVSS 5.4, Google Chrome)
- [CVE-2026-106284](https://cve.now/CVE-2026-106284.md): Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the rende (CVSS 4.7, Google Chrome)
- [CVE-2026-106410](https://cve.now/CVE-2026-106410.md): Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proc (CVSS 4.2, Google Chrome)
- [CVE-2026-106277](https://cve.now/CVE-2026-106277.md): Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML (CVSS 4.3, Google Chrome)
- [CVE-2026-106289](https://cve.now/CVE-2026-106289.md): Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted H (CVSS 6.5, Google Chrome)
- [CVE-2026-106228](https://cve.now/CVE-2026-106228.md): Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to (CVSS 8.3, Google Chrome)
- [CVE-2026-106333](https://cve.now/CVE-2026-106333.md): Incorrect authorization in Input in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI (CVSS 5.4, Google Chrome)
- [CVE-2026-106201](https://cve.now/CVE-2026-106201.md): Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr (CVSS 8.8, Google Chrome)
- [CVE-2026-106303](https://cve.now/CVE-2026-106303.md): Observable discrepancy in Autofill AI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer pro (CVSS 5.3, Google Chrome)
- [CVE-2026-106180](https://cve.now/CVE-2026-106180.md): Observable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially obtain cross-origin dat (CVSS 3.1, Google Chrome)
- [CVE-2026-106206](https://cve.now/CVE-2026-106206.md): Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive informat (CVSS 5.9, Google Chrome)
- [CVE-2026-106280](https://cve.now/CVE-2026-106280.md): Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially bypass web ori (CVSS 6.5, Google Chrome)
- [CVE-2026-106322](https://cve.now/CVE-2026-106322.md): Open redirect in AppManifest in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web o (CVSS 6.1, Google Chrome)
- [CVE-2026-106405](https://cve.now/CVE-2026-106405.md): Race condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass web origin policy via (CVSS 6.0, Google Chrome)
- [CVE-2026-106356](https://cve.now/CVE-2026-106356.md): Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via (CVSS 5.4, Google Chrome)
- [CVE-2026-106370](https://cve.now/CVE-2026-106370.md): Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the render (CVSS 4.7, Google Chrome)
- [CVE-2026-106188](https://cve.now/CVE-2026-106188.md): Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictio (CVSS 6.1, Google Chrome)
- [CVE-2026-106392](https://cve.now/CVE-2026-106392.md): Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a c (CVSS 4.3, Google Chrome)
- [CVE-2026-106282](https://cve.now/CVE-2026-106282.md): UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML pag (CVSS 5.4, Google Chrome)
- [CVE-2026-106182](https://cve.now/CVE-2026-106182.md): UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page (CVSS 5.4, Google Chrome)
- [CVE-2026-106416](https://cve.now/CVE-2026-106416.md): Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI ele (CVSS 5.4, Google Chrome)
- [CVE-2026-106302](https://cve.now/CVE-2026-106302.md): UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to (CVSS 5.4, Google Chrome)
- [CVE-2026-106246](https://cve.now/CVE-2026-106246.md): Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML (CVSS 5.4, Google Chrome)
- [CVE-2026-106311](https://cve.now/CVE-2026-106311.md): Clickjacking in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof U (CVSS 5.4, Google Chrome)
- [CVE-2026-106402](https://cve.now/CVE-2026-106402.md): Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spo (CVSS 4.8, Google Chrome)
- [CVE-2026-106361](https://cve.now/CVE-2026-106361.md): Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leverag (CVSS 6.5, Google Chrome)
- [CVE-2026-106279](https://cve.now/CVE-2026-106279.md): Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised t (CVSS 7.4, Google Chrome)
- [CVE-2026-106253](https://cve.now/CVE-2026-106253.md): Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a cr (CVSS 4.3, Google Chrome)
- [CVE-2026-106424](https://cve.now/CVE-2026-106424.md): Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read (CVSS 4.0, Google Chrome)
- [CVE-2026-106342](https://cve.now/CVE-2026-106342.md): Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted (CVSS 8.8, Google Chrome)
- [CVE-2026-106354](https://cve.now/CVE-2026-106354.md): Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a (CVSS 4.3, Google Chrome)
- [CVE-2026-106326](https://cve.now/CVE-2026-106326.md): Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions in (CVSS 4.4, Google Chrome)
- [CVE-2026-106198](https://cve.now/CVE-2026-106198.md): Missing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proce (CVSS 8.2, Google Chrome)
- [CVE-2026-106378](https://cve.now/CVE-2026-106378.md): Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the… (CVSS 8.3, Google Chrome)
- [CVE-2026-106290](https://cve.now/CVE-2026-106290.md): Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the render (CVSS 4.7, Google Chrome)
- [CVE-2026-106406](https://cve.now/CVE-2026-106406.md): Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to (CVSS 5.4, Google Chrome)
- [CVE-2026-106261](https://cve.now/CVE-2026-106261.md): Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a cr (CVSS 6.5, Google Chrome)
- [CVE-2026-106408](https://cve.now/CVE-2026-106408.md): Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin poli (CVSS 6.5, Google Chrome)
- [CVE-2026-106414](https://cve.now/CVE-2026-106414.md): Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineerin (CVSS 9.6, Google Chrome)
- [CVE-2026-106196](https://cve.now/CVE-2026-106196.md): Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy (CVSS 7.6, Google Chrome)
- [CVE-2026-106397](https://cve.now/CVE-2026-106397.md): Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering (CVSS 6.1, Google Chrome)
- [CVE-2026-106389](https://cve.now/CVE-2026-106389.md): Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass sys (CVSS 6.5, Google Chrome)
- [CVE-2026-106407](https://cve.now/CVE-2026-106407.md): Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer p (CVSS 6.5, Google Chrome)
- [CVE-2026-106244](https://cve.now/CVE-2026-106244.md): Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restriction (CVSS 6.5, Google Chrome)
- [CVE-2026-106185](https://cve.now/CVE-2026-106185.md): Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process (CVSS 6.5, Google Chrome)
- [CVE-2026-106224](https://cve.now/CVE-2026-106224.md): Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proc (CVSS 3.1, Google Chrome)
- [CVE-2026-106415](https://cve.now/CVE-2026-106415.md): Information leak in Enterprise in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted (CVSS 4.3, Google Chrome)
- [CVE-2026-106335](https://cve.now/CVE-2026-106335.md): Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-106189](https://cve.now/CVE-2026-106189.md): Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to by (CVSS 7.3, Google Chrome)
- [CVE-2026-106266](https://cve.now/CVE-2026-106266.md): Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proce (CVSS 6.5, Google Chrome)
- [CVE-2026-106363](https://cve.now/CVE-2026-106363.md): Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proce (CVSS 8.3, Google Chrome)
- [CVE-2026-106225](https://cve.now/CVE-2026-106225.md): Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain (CVSS 8.8, Google Chrome)
- [CVE-2026-106425](https://cve.now/CVE-2026-106425.md): Missing authorization in BrowserTag in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proce (CVSS 4.2, Google Chrome)
- [CVE-2026-106217](https://cve.now/CVE-2026-106217.md): Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proc (CVSS 4.3, Google Chrome)
- [CVE-2026-106381](https://cve.now/CVE-2026-106381.md): Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy (CVSS 6.5, Google Chrome)
- [CVE-2026-106241](https://cve.now/CVE-2026-106241.md): Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineer (CVSS 9.6, Google Chrome)
- [CVE-2026-106242](https://cve.now/CVE-2026-106242.md): Information leak in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to (CVSS 6.5, Google Chrome)
- [CVE-2026-106223](https://cve.now/CVE-2026-106223.md): Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the san (CVSS 4.7, Google Chrome)
- [CVE-2026-106314](https://cve.now/CVE-2026-106314.md): Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a (CVSS 8.8, Google Chrome)
- [CVE-2026-106300](https://cve.now/CVE-2026-106300.md): Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to (CVSS 4.7, Google Chrome)
- [CVE-2026-106291](https://cve.now/CVE-2026-106291.md): Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the s (CVSS 8.8, Google Chrome)
- [CVE-2026-106283](https://cve.now/CVE-2026-106283.md): Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially e (CVSS 8.8, Google Chrome)
- [CVE-2026-106313](https://cve.now/CVE-2026-106313.md): Incorrect authorization in Browser in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineer (CVSS 5.1, Google Chrome)
- [CVE-2026-106194](https://cve.now/CVE-2026-106194.md): Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer p (CVSS 8.3, Google Chrome)
- [CVE-2026-106267](https://cve.now/CVE-2026-106267.md): Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process (CVSS 6.5, Google Chrome)
- [CVE-2026-106365](https://cve.now/CVE-2026-106365.md): Missing authorization in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a craft (CVSS 6.5, Google Chrome)
- [CVE-2026-106274](https://cve.now/CVE-2026-106274.md): Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engi (CVSS 8.8, Google Chrome)
- [CVE-2026-106315](https://cve.now/CVE-2026-106315.md): Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sand (CVSS 8.8, Google Chrome)
- [CVE-2026-106181](https://cve.now/CVE-2026-106181.md): Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the rendere (CVSS 5.3, Google Chrome)
- [CVE-2026-106286](https://cve.now/CVE-2026-106286.md): Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network (CVSS 6.5, Google Chrome)
- [CVE-2026-106208](https://cve.now/CVE-2026-106208.md): Missing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensiti (CVSS 6.5, Google Chrome)
- [CVE-2026-106222](https://cve.now/CVE-2026-106222.md): Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafte (CVSS 5.9, Google Chrome)
- [CVE-2026-106420](https://cve.now/CVE-2026-106420.md): Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering t (CVSS 5.4, Google Chrome)
- [CVE-2026-106324](https://cve.now/CVE-2026-106324.md): Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system a (CVSS 6.1, Google Chrome)
- [CVE-2026-106238](https://cve.now/CVE-2026-106238.md): Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potent (CVSS 8.3, Google Chrome)
- [CVE-2026-106265](https://cve.now/CVE-2026-106265.md): UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI ele (CVSS 5.4, Google Chrome)
- [CVE-2026-106200](https://cve.now/CVE-2026-106200.md): Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-106204](https://cve.now/CVE-2026-106204.md): Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome)
- [CVE-2026-106421](https://cve.now/CVE-2026-106421.md): Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome)
- [CVE-2026-106349](https://cve.now/CVE-2026-106349.md): Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr (CVSS 8.8, Google Chrome)
- [CVE-2026-106383](https://cve.now/CVE-2026-106383.md): Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-106184](https://cve.now/CVE-2026-106184.md): Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted (CVSS 4.3, Google Chrome)
- [CVE-2026-106240](https://cve.now/CVE-2026-106240.md): Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr (CVSS 8.8, Google Chrome)
- [CVE-2026-106357](https://cve.now/CVE-2026-106357.md): Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-106190](https://cve.now/CVE-2026-106190.md): Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-106346](https://cve.now/CVE-2026-106346.md): Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary cod (CVSS 8.8, Google Chrome)
- [CVE-2026-106423](https://cve.now/CVE-2026-106423.md): Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-104945](https://cve.now/CVE-2026-104945.md): Authenticated ONVIF PTZ Out-of-Bounds Stack Write Denial of Service in TP-Link Tapo C500 (CVSS 6.8, TP-Link Systems Tapo C500)
- [CVE-2026-106411](https://cve.now/CVE-2026-106411.md): Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-106318](https://cve.now/CVE-2026-106318.md): Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-106233](https://cve.now/CVE-2026-106233.md): Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to exec (CVSS 8.3, Google Chrome)
- [CVE-2026-106278](https://cve.now/CVE-2026-106278.md): Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrar (CVSS 8.8, Google Chrome)
- [CVE-2026-106268](https://cve.now/CVE-2026-106268.md): Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-106257](https://cve.now/CVE-2026-106257.md): Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-106235](https://cve.now/CVE-2026-106235.md): Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox vi (CVSS 8.8, Google Chrome)
- [CVE-2026-106248](https://cve.now/CVE-2026-106248.md): Use after free in Bindings in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox vi (CVSS 8.8, Google Chrome)
- [CVE-2026-106329](https://cve.now/CVE-2026-106329.md): Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to pot (CVSS 9.6, Google Chrome)
- [CVE-2026-106211](https://cve.now/CVE-2026-106211.md): Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially ex (CVSS 9.6, Google Chrome)
- [CVE-2026-106379](https://cve.now/CVE-2026-106379.md): Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted H (CVSS 4.3, Google Chrome)
- [CVE-2026-106227](https://cve.now/CVE-2026-106227.md): Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a (CVSS 9.6, Google Chrome)
- [CVE-2026-106393](https://cve.now/CVE-2026-106393.md): Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to exec (CVSS 8.3, Google Chrome)
- [CVE-2026-106255](https://cve.now/CVE-2026-106255.md): Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sand (CVSS 8.8, Google Chrome)
- [CVE-2026-106193](https://cve.now/CVE-2026-106193.md): Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-106298](https://cve.now/CVE-2026-106298.md): Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary c (CVSS 9.6, Google Chrome)
- [CVE-2026-106281](https://cve.now/CVE-2026-106281.md): Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the s (CVSS 9.6, Google Chrome)
- [CVE-2026-106332](https://cve.now/CVE-2026-106332.md): Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted (CVSS 4.3, Google Chrome)
- [CVE-2026-106203](https://cve.now/CVE-2026-106203.md): Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to (CVSS 8.8, Google Chrome)
- [CVE-2026-106273](https://cve.now/CVE-2026-106273.md): Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process t (CVSS 4.7, Google Chrome)
- [CVE-2026-106202](https://cve.now/CVE-2026-106202.md): Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the s (CVSS 4.7, Google Chrome)
- [CVE-2026-106231](https://cve.now/CVE-2026-106231.md): Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbo (CVSS 4.7, Google Chrome)
- [CVE-2026-106323](https://cve.now/CVE-2026-106323.md): Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engine (CVSS 9.6, Google Chrome)
- [CVE-2026-106396](https://cve.now/CVE-2026-106396.md): Improper input validation in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engin (CVSS 5.4, Google Chrome)
- [CVE-2026-106419](https://cve.now/CVE-2026-106419.md): Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside th (CVSS 9.6, Google Chrome)
- [CVE-2026-106426](https://cve.now/CVE-2026-106426.md): Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the (CVSS 8.3, Google Chrome)
- [CVE-2026-106239](https://cve.now/CVE-2026-106239.md): Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary c (CVSS 9.6, Google Chrome)
- [CVE-2026-106364](https://cve.now/CVE-2026-106364.md): Incorrect authorization in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proces (CVSS 5.3, Google Chrome)
- [CVE-2026-106214](https://cve.now/CVE-2026-106214.md): Information leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information (CVSS 5.3, Google Chrome)
- [CVE-2026-106243](https://cve.now/CVE-2026-106243.md): Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via cr (CVSS 5.3, Google Chrome)
- [CVE-2026-106412](https://cve.now/CVE-2026-106412.md): Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process (CVSS 8.3, Google Chrome)
- [CVE-2026-106377](https://cve.now/CVE-2026-106377.md): Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execut (CVSS 8.3, Google Chrome)
- [CVE-2026-106293](https://cve.now/CVE-2026-106293.md): Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potent (CVSS 8.3, Google Chrome)
- [CVE-2026-106369](https://cve.now/CVE-2026-106369.md): Missing authorization in Translate in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proces (CVSS 4.2, Google Chrome)
- [CVE-2026-106215](https://cve.now/CVE-2026-106215.md): Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the s (CVSS 4.7, Google Chrome)
- [CVE-2026-106308](https://cve.now/CVE-2026-106308.md): Incorrect reference resolution in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social (CVSS 8.8, Google Chrome)
- [CVE-2026-106376](https://cve.now/CVE-2026-106376.md): Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the s (CVSS 4.7, Google Chrome)
- [CVE-2026-106258](https://cve.now/CVE-2026-106258.md): Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the s (CVSS 4.7, Google Chrome)
- [CVE-2026-106366](https://cve.now/CVE-2026-106366.md): Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy (CVSS 5.4, Google Chrome)
- [CVE-2026-106327](https://cve.now/CVE-2026-106327.md): Incorrect authorization in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process t (CVSS 8.3, Google Chrome)
- [CVE-2026-106245](https://cve.now/CVE-2026-106245.md): Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted (CVSS 4.3, Google Chrome)
- [CVE-2026-102322](https://cve.now/CVE-2026-102322.md): Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a c (CVSS 9.6, Google Chrome)
- [CVE-2026-106347](https://cve.now/CVE-2026-106347.md): Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-106358](https://cve.now/CVE-2026-106358.md): Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox (CVSS 9.6, Google Chrome)
- [CVE-2026-106197](https://cve.now/CVE-2026-106197.md): Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox vi (CVSS 9.6, Google Chrome)
- [CVE-2026-106382](https://cve.now/CVE-2026-106382.md): Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox (CVSS 9.6, Google Chrome)
- [CVE-2026-104944](https://cve.now/CVE-2026-104944.md): Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500 (CVSS 7.1, TP-Link Systems Tapo C500)
- [CVE-2026-86362](https://cve.now/CVE-2026-86362.md): Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. (CVSS 8.2, Dell System Update)
- [CVE-2026-86361](https://cve.now/CVE-2026-86361.md): Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. (CVSS 8.2, Dell System Update)
- [CVE-2026-56952](https://cve.now/CVE-2026-56952.md): In platform\_msg\_handler\_init of default\_msg\_handlers.c, there is a possible permission bypass due to a missing permission check. (CVSS 6.7, Google Android)
- [CVE-2026-56936](https://cve.now/CVE-2026-56936.md): In wacom\_hid\_set\_device\_mode of wacom\_sys.c, there is a possible out-of-bounds write due to a missing bounds check. (CVSS 6.8, Google Android)
- [CVE-2026-56906](https://cve.now/CVE-2026-56906.md): In ep\_free of eventpoll.c, there is a possible use-after-free due to a race condition. (CVSS 7.0, Google Android)
- [CVE-2026-55330](https://cve.now/CVE-2026-55330.md): In BluetoothCccHandlerCallbackImpl of bluetooth\_ccc.cc, there is a possible use-after-free due to a logic error in the code. (CVSS 9.8, Google Android)
- [CVE-2026-55307](https://cve.now/CVE-2026-55307.md): In kdn\_set\_sysregs\_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. (CVSS 4.4, Google Android)
- [CVE-2026-0198](https://cve.now/CVE-2026-0198.md): In is\_pd\_allowed of gem\_msg.c, there is a possible permission bypass due to a missing permission check. (CVSS 4.4, Google Android)
- [CVE-2026-105488](https://cve.now/CVE-2026-105488.md): Missing authorization in the global vault in Devolutions Server 2026.3.7.0 and earlier allows an authenticated user with only the global vau (CVSS 7.1, Devolutions Server)
- [CVE-2026-105485](https://cve.now/CVE-2026-105485.md): Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a u (CVSS 6.8, Devolutions Server)
- [CVE-2026-106033](https://cve.now/CVE-2026-106033.md): Ansible: ansible-ui: ansible ui dom xss in /redirect next parameter (CVSS 5.4, Red Hat Ansible Automation Platform · Red Hat Hardened Imag…)
- [CVE-2026-63697](https://cve.now/CVE-2026-63697.md): Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. (CVSS 7.6, Dell System Update)
- [CVE-2026-9226](https://cve.now/CVE-2026-9226.md): Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over (CVSS 6.8, Devolutions Server)
- [CVE-2026-86360](https://cve.now/CVE-2026-86360.md): Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vu (CVSS 9.6, Dell System Update)
- [CVE-2026-106123](https://cve.now/CVE-2026-106123.md): RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load() (CVSS 5.7, rabbitmq-java-client · com.rabbitmq amqp-client +1)
- [CVE-2026-83550](https://cve.now/CVE-2026-83550.md): Postgres-exporter: net/http/pprof exposed on metrics listener (CVSS 7.1, Red Hat Multicluster Global Hub)
- [CVE-2026-106122](https://cve.now/CVE-2026-106122.md): RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers (CVSS 6.0, rabbitmq-java-client · com.rabbitmq amqp-client +1)
- [CVE-2026-71168](https://cve.now/CVE-2026-71168.md): Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vu (CVSS 7.3, Dell System Update)
- [CVE-2026-106121](https://cve.now/CVE-2026-106121.md): RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS (CVSS 4.9, rabbitmq-java-client · com.rabbitmq amqp-client +1)
- [CVE-2026-106120](https://cve.now/CVE-2026-106120.md): LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, \`.first\`/\`.last\`, negative index, and for-loop iteration (CVSS 6.0, harttle liquidjs · liquidjs)
- [CVE-2026-106119](https://cve.now/CVE-2026-106119.md): LangChain: MongoDBChatMessageHistory query injection can allow cross-session access (CVSS 6.0, langchain-ai langchainjs · @langchain mongodb +1)
- [CVE-2026-106118](https://cve.now/CVE-2026-106118.md): ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write (CVSS 7.5, SixLabors ImageSharp · SixLabors.ImageSharp)
- [CVE-2026-106117](https://cve.now/CVE-2026-106117.md): ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp (CVSS 7.5, SixLabors ImageSharp · ImageSharp)
- [CVE-2026-106116](https://cve.now/CVE-2026-106116.md): ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop (CVSS 5.3, SixLabors ImageSharp · SixLabors.ImageSharp)
- [CVE-2026-88252](https://cve.now/CVE-2026-88252.md): Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion (CVSS 4.7, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-106115](https://cve.now/CVE-2026-106115.md): ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer (CVSS 7.5, SixLabors ImageSharp · SixLabors.ImageSharp)
- [CVE-2026-106114](https://cve.now/CVE-2026-106114.md): ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions (CVSS 5.3, SixLabors ImageSharp · SixLabors.ImageSharp)
- [CVE-2026-66666](https://cve.now/CVE-2026-66666.md): WordPress Core \<= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability (CVSS 6.9, Automattic WordPress)
- [CVE-2026-106113](https://cve.now/CVE-2026-106113.md): ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index (CVSS 7.5, SixLabors ImageSharp · SixLabors.ImageSharp)
- [CVE-2026-106112](https://cve.now/CVE-2026-106112.md): ImageSharp: ICC LUT16 output channel count can write beyond Vector4 (CVSS 7.5, SixLabors ImageSharp · SixLabors.ImageSharp)
- [CVE-2026-106111](https://cve.now/CVE-2026-106111.md): ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate (CVSS 5.9, SixLabors ImageSharp · SixLabors.ImageSharp)
- [CVE-2026-101207](https://cve.now/CVE-2026-101207.md): Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Ele (CVSS 8.8, Dell OpenManage Integration)
- [CVE-2026-106110](https://cve.now/CVE-2026-106110.md): ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer (CVSS 7.5, SixLabors ImageSharp · SixLabors.ImageSharp)
- [CVE-2026-106109](https://cve.now/CVE-2026-106109.md): Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories (CVSS 4.1, quasarframework quasar · @quasar app-vite +1)
- [CVE-2026-106107](https://cve.now/CVE-2026-106107.md): Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained (CVSS 8.3, quasarframework quasar · @quasar app-vite +1)
- [CVE-2026-106106](https://cve.now/CVE-2026-106106.md): Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its \</script\> escape is bypassable (CVSS 7.1, quasarframework quasar · @quasar render-ssr-error +3)
- [CVE-2026-106105](https://cve.now/CVE-2026-106105.md): Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions (CVSS 8.4, quasarframework quasar · @quasar app-vite +5)
- [CVE-2026-106104](https://cve.now/CVE-2026-106104.md): Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server (CVSS 8.7, quasarframework quasar · quasar)
- [CVE-2026-106103](https://cve.now/CVE-2026-106103.md): Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile (CVSS 7.1, quasarframework quasar · @quasar icongenie +1)
- [CVE-2026-106102](https://cve.now/CVE-2026-106102.md): Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead() (CVSS 10.0, quasarframework quasar · quasar)
- [CVE-2026-106101](https://cve.now/CVE-2026-106101.md): Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service (CVSS 3.1, quasarframework quasar · quasar)
- [CVE-2026-106100](https://cve.now/CVE-2026-106100.md): Payload: Field-level write access bypass in Payload on MongoDB (CVSS 7.1, payloadcms payload · @payloadcms/db-mongodb)
- [CVE-2026-105868](https://cve.now/CVE-2026-105868.md): Payload: Uploaded XML files could execute same-origin JavaScript (CVSS 8.6, payloadcms payload · payload)
- [CVE-2026-105867](https://cve.now/CVE-2026-105867.md): Payload: Client uploads could overwrite S3 objects (CVSS 7.1, payloadcms payload · @payloadcms storage-s3 +1)
- [CVE-2026-105866](https://cve.now/CVE-2026-105866.md): Payload: Unauthenticated account-lockout denial of service (CVSS 6.9, payloadcms payload · payload)
- [CVE-2026-105865](https://cve.now/CVE-2026-105865.md): Payload: Incomplete validation during the upload file lifecycle (CVSS 8.1, payloadcms payload · payload)
- [CVE-2026-105864](https://cve.now/CVE-2026-105864.md): Payload: Cross-tenant create in @payloadcms/plugin-multi-tenant (CVSS 5.3, payloadcms payload · @payloadcms plugin-multi-tenant +1)
- [CVE-2026-105863](https://cve.now/CVE-2026-105863.md): Payload authentication token field handling issue (CVSS 9.2, payloadcms payload · payload)
- [CVE-2026-105862](https://cve.now/CVE-2026-105862.md): Payload: Bypassed sanitization of user uploaded SVGs (CVSS 8.7, payloadcms payload · payload)
- [CVE-2026-105861](https://cve.now/CVE-2026-105861.md): Payload external upload trust validation issue (CVSS 7.2, payloadcms payload · payload)
- [CVE-2026-105860](https://cve.now/CVE-2026-105860.md): Payload: Tenant authorization bypass in Multi-Tenant Plugin (CVSS 7.1, payloadcms payload · @payloadcms/plugin-multi-tenant)
- [CVE-2026-106219](https://cve.now/CVE-2026-106219.md): In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server (CVSS 6.5, JetBrains TeamCity)
- [CVE-2026-106218](https://cve.now/CVE-2026-106218.md): In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible (CVSS 8.8, JetBrains TeamCity)
- [CVE-2026-105859](https://cve.now/CVE-2026-105859.md): Payload: Unauthorized update to collection documents (CVSS 9.8, payloadcms payload · payload)
- [CVE-2026-105858](https://cve.now/CVE-2026-105858.md): Payload: Remote Code Execution through first-register (CVSS 8.1, payloadcms payload · payload)
- [CVE-2026-105857](https://cve.now/CVE-2026-105857.md): Payload: RCE in Payload Form Builder (CVSS 10.0, payloadcms payload · @payloadcms/plugin-form-builder)
- [CVE-2026-105856](https://cve.now/CVE-2026-105856.md): Payload: SQL injection in SQLite/Postgres (CVSS 8.6, payloadcms payload · @payloadcms db-d1-sqlite +7)
- [CVE-2026-105855](https://cve.now/CVE-2026-105855.md): Payload: Field-level password update restrictions were not enforced (CVSS 7.6, payloadcms payload · payload)
- [CVE-2026-105854](https://cve.now/CVE-2026-105854.md): Payload: ReDoS in Multipart Content-Type Validation (CVSS 8.7, payloadcms payload · payload)
- [CVE-2026-105853](https://cve.now/CVE-2026-105853.md): Payload: Token refresh and password reset responses may expose restricted user fields (CVSS 7.1, payloadcms payload · payload)
- [CVE-2026-104070](https://cve.now/CVE-2026-104070.md): SPIP Crayons Plugin \< 3.5.0 Authorization Bypass RCE (CVSS 9.3, SPIP Crayons Plugin)
- [CVE-2026-105852](https://cve.now/CVE-2026-105852.md): Payload relationship-query authorization bypass (CVSS 6.9, payloadcms payload · payload)
- [CVE-2026-105851](https://cve.now/CVE-2026-105851.md): Payload: Field access control bypass on auth collections (CVSS 9.3, payloadcms payload)
- [CVE-2026-105850](https://cve.now/CVE-2026-105850.md): Payload: Order confirmation validation issue in Payload Ecommerce (CVSS 8.8, payloadcms payload · @payloadcms plugin-ecommerce +1)
- [CVE-2026-105849](https://cve.now/CVE-2026-105849.md): Payload: API key disclosure through ordinary document reads (CVSS 7.7, payloadcms payload · payload)
- [CVE-2026-104850](https://cve.now/CVE-2026-104850.md): MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server (CVSS 7.5, modelcontextprotocol typescript-sdk · @modelcontextproto… +1)
- [CVE-2026-105848](https://cve.now/CVE-2026-105848.md): Payload: Insufficient Access Control in Stripe REST Proxy (CVSS 6.4, payloadcms payload · @payloadcms plugin-stripe +1)
- [CVE-2026-105847](https://cve.now/CVE-2026-105847.md): Payload: Polymorphic join queries could disclose hidden fields (CVSS 7.1, payloadcms payload · payload)
- [CVE-2026-105846](https://cve.now/CVE-2026-105846.md): Payload: Untrusted redirect URL parameter exploit (CVSS 6.1, payloadcms payload · @payloadcms next +2)
- [CVE-2026-105957](https://cve.now/CVE-2026-105957.md): SourceCodester Performance Indicator System view\_product.php sql injection (CVSS 5.3, SourceCodester Performance Indicator System)
- [CVE-2026-105845](https://cve.now/CVE-2026-105845.md): Payload: SQL Injection in SQLite and Postgres (CVSS 9.8, payloadcms payload · payload)
- [CVE-2026-105844](https://cve.now/CVE-2026-105844.md): Payload: Prototype pollution in Payload Import Export plugin (CVSS 9.3, payloadcms payload · @payloadcms plugin-import-export +1)
- [CVE-2026-105806](https://cve.now/CVE-2026-105806.md): Payload: Improper access control for MCP API keys (CVSS 8.6, payloadcms payload · @payloadcms plugin-mcp +1)
- [CVE-2026-26287](https://cve.now/CVE-2026-26287.md): External Secrets Operator: label enforcement bypass in webhook generator enables secret exfiltration (CVSS 7.1, external-secrets · github.com/external-secrets/external-sec…)
- [CVE-2026-105950](https://cve.now/CVE-2026-105950.md): getformwork URI Sanitizer DomSanitizer.php sanitizeNodeAttribute cross site scripting (CVSS 5.1, getformwork formwork)
- [CVE-2026-63690](https://cve.now/CVE-2026-63690.md): Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability in the csi (CVSS 5.4, Dell Container Storage Modules)
- [CVE-2026-63691](https://cve.now/CVE-2026-63691.md): Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell CSI Driver for PowerM (CVSS 6.1, Dell Container Storage Modules)
- [CVE-2026-105805](https://cve.now/CVE-2026-105805.md): Payload: Sort queries could expose protected field information (CVSS 6.9, payloadcms payload · payload)
- [CVE-2026-105804](https://cve.now/CVE-2026-105804.md): Payload: Password hashes use insufficient PBKDF2 iterations (CVSS 5.7, payloadcms payload · payload)
- [CVE-2026-63689](https://cve.now/CVE-2026-63689.md): Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. (CVSS 6.5, Dell Container Storage Modules)
- [CVE-2026-70411](https://cve.now/CVE-2026-70411.md): Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the (CVSS 7.1, Dell Container Storage Modules)
- [CVE-2026-61411](https://cve.now/CVE-2026-61411.md): Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. (CVSS 7.7, Dell Container Storage Modules)
- [CVE-2026-76105](https://cve.now/CVE-2026-76105.md): Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. (CVSS 7.7, Dell Container Storage Modules)
- [CVE-2026-67270](https://cve.now/CVE-2026-67270.md): Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server (CVSS 8.2, Dell Container Storage Modules)
- [CVE-2026-67273](https://cve.now/CVE-2026-67273.md): Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engin (CVSS 9.6, Dell Container Storage Modules)
- [CVE-2026-61421](https://cve.now/CVE-2026-61421.md): Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization (CVSS 9.8, Dell Container Storage Modules)
- [CVE-2026-104069](https://cve.now/CVE-2026-104069.md): HortusFox \< 6.2 Remote Code Execution via Theme Import (CVSS 8.6, danielbrendel hortusfox-web)
- [CVE-2026-105801](https://cve.now/CVE-2026-105801.md): openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation (CVSS 8.4, openapi-generators openapi-python-client · openapi-python-c…)
- [CVE-2026-54472](https://cve.now/CVE-2026-54472.md): Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. (CVSS 9.8, Dell Container Storage Modules)
- [CVE-2025-8352](https://cve.now/CVE-2025-8352.md): Denial-of-service vulnerability in ESET PROTECT On-Prem (CVSS 6.9, ESET spol. s.r.o ESET PROTECT On-Prem)
- [CVE-2026-105800](https://cve.now/CVE-2026-105800.md): i18next-http-backend incomplete URL validation permits SSRF (CVSS 3.7, i18next-http-backend)
- [CVE-2026-67269](https://cve.now/CVE-2026-67269.md): Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the Conta (CVSS 9.9, Dell Container Storage Modules)
- [CVE-2026-105799](https://cve.now/CVE-2026-105799.md): LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values (CVSS 2.3, langchain-ai langchainjs · @langchain redis +1)
- [CVE-2026-105922](https://cve.now/CVE-2026-105922.md): vllm-project vLLM Penalty utils.py get\_token\_bin\_counts\_and\_mask denial of service (CVSS 5.3, vllm-project vLLM · vllm)
- [CVE-2026-63692](https://cve.now/CVE-2026-63692.md): Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. (CVSS 10.0, Dell Container Storage Modules)
- [CVE-2026-63688](https://cve.now/CVE-2026-63688.md): Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in th (CVSS 10.0, Dell Container Storage Modules)
- [CVE-2026-105798](https://cve.now/CVE-2026-105798.md): SimpleChat: Stored XSS via group document filename in inline onclick handler (CVSS 8.7, microsoft simplechat)
- [CVE-2026-105797](https://cve.now/CVE-2026-105797.md): SimpleChat: Command injection via authorization-gate ordering flaw (arbitrary process spawn through MCP stdio transport) (CVSS 8.8, microsoft simplechat)
- [CVE-2026-105796](https://cve.now/CVE-2026-105796.md): Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators (CVSS 8.8, microsoft kiota · Microsoft.OpenApi.Kiota +1)
- [CVE-2026-105795](https://cve.now/CVE-2026-105795.md): Kiota: Unsafe oauth\_card\_path references in Kiota-generated API plugin manifests (CVSS 3.1, microsoft kiota · Microsoft.OpenApi.Kiota +1)
- [CVE-2026-105921](https://cve.now/CVE-2026-105921.md): Kusalkasilva Learning-Management-System search\_class.php sql injection (CVSS 5.3, Kusalkasilva Learning-Management-System)
- [CVE-2026-105794](https://cve.now/CVE-2026-105794.md): MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL (CVSS 9.1, microsoft msquic · Microsoft.Native.Quic.MsQuic.OpenSSL)
- [CVE-2026-105793](https://cve.now/CVE-2026-105793.md): Microsoft UFO: Authenticated Android shell command injection in Mobile MCP \`press\_key\` (CVSS 9.1, microsoft UFO)
- [CVE-2026-105792](https://cve.now/CVE-2026-105792.md): Microsoft UFO: Authenticated task-result request can deadlock UFO server session manager (CVSS 6.5, microsoft UFO)
- [CVE-2026-105791](https://cve.now/CVE-2026-105791.md): Microsoft UFO: Arbitrary code execution in \`run\_shell\` via \`explorer.exe\` argument injection (CVSS 7.5, microsoft UFO)
- [CVE-2026-105790](https://cve.now/CVE-2026-105790.md): Microsoft UFO: Authenticated Galaxy device registration can bypass WebSocket SSRF IP pinning via redirects (CVSS 6.4, microsoft UFO)
- [CVE-2026-105789](https://cve.now/CVE-2026-105789.md): Microsoft UFO: Arbitrary file write in the Linux MCP \`execute\_command\` tool (CVSS 5.4, microsoft UFO)
- [CVE-2026-105788](https://cve.now/CVE-2026-105788.md): Microsoft UFO: Authenticated Android shell command injection in Mobile MCP type\_text and launch\_app (CVSS 8.8, microsoft UFO)
- [CVE-2026-106041](https://cve.now/CVE-2026-106041.md): Mooncake Store through 0.3.13.post1 Missing Authorization via NotifyOffloadSuccess RPC (CVSS 6.9, kvcache-ai Mooncake)
- [CVE-2026-106040](https://cve.now/CVE-2026-106040.md): Mooncake Store through 0.3.13.post1 Missing Authorization via EvictDiskReplica RPC (CVSS 8.8, kvcache-ai Mooncake)
- [CVE-2026-106039](https://cve.now/CVE-2026-106039.md): Mooncake Store through 0.3.13.post1 Missing Authorization in Replication Task RPC (CVSS 6.9, kvcache-ai Mooncake)
- [CVE-2026-106038](https://cve.now/CVE-2026-106038.md): Mooncake Store through 0.3.13.post1 Unauthenticated Object Deletion via Remove RPCs (CVSS 8.8, kvcache-ai Mooncake)
- [CVE-2026-106037](https://cve.now/CVE-2026-106037.md): Mooncake through 0.3.13.post1 Missing Authentication in Store REST Service (CVSS 9.3, kvcache-ai Mooncake)
- [CVE-2026-85523](https://cve.now/CVE-2026-85523.md): OS Command Injection in Felisify Informatics' SambaBox (CVSS 8.8, Felisify Information Technologies Industry and Trade SambaB…)
- [CVE-2026-34498](https://cve.now/CVE-2026-34498.md): L4L (CVSS 5.1, Johnson Controls Illustra Standard - L4L China)
- [CVE-2026-91140](https://cve.now/CVE-2026-91140.md): OS command injection in Progress Software Autonomous REST Connector GenAI Agents (CVSS 9.6, Progress Software Autonomous REST Connector GenAI Agents)
- [CVE-2026-87975](https://cve.now/CVE-2026-87975.md): Privilege abuse in model formsets with editable primary keys (CVSS 4.3, djangoproject Django)
- [CVE-2026-106026](https://cve.now/CVE-2026-106026.md): tftp-hpa 5.4 before 6.0 Out-of-Bounds Read via tftpd Remap Jump Rule (CVSS 6.3, H. Peter Anvin tftp-hpa)
- [CVE-2026-105842](https://cve.now/CVE-2026-105842.md): lrzsz before 0.13.0 Heap Buffer Overflow via lrz procheader() Pathname (CVSS 6.1, Uwe Ohse lrzsz)
- [CVE-2026-105841](https://cve.now/CVE-2026-105841.md): lrzsz before 0.13.0 OS Command Injection via lrz Pipe Mode (CVSS 7.7, Uwe Ohse lrzsz)
- [CVE-2026-105840](https://cve.now/CVE-2026-105840.md): lrzsz before 0.13.0 Path Traversal via lrz Restricted Mode checkpath() (CVSS 7.7, Uwe Ohse lrzsz)
- [CVE-2026-105839](https://cve.now/CVE-2026-105839.md): libmikmod before 3.3.14 Heap Buffer Overflow via OKT Loader OKT\_doPBOD (CVSS 8.5, sezero libmikmod)
- [CVE-2026-105838](https://cve.now/CVE-2026-105838.md): libmikmod before 3.3.14 Heap Out-of-Bounds Read via IT Module Loader (CVSS 6.8, sezero libmikmod)
- [CVE-2026-105837](https://cve.now/CVE-2026-105837.md): libmikmod before 3.3.14 Heap Buffer Overflow via DSM Loader Integer Overflow (CVSS 8.5, sezero libmikmod)
- [CVE-2026-87890](https://cve.now/CVE-2026-87890.md): Potential request forgery via spatial lookup byte values (CVSS 5.3, djangoproject Django)
- [CVE-2026-84429](https://cve.now/CVE-2026-84429.md): Potential denial-of-service vulnerability in HTTP header parsing (CVSS 5.3, djangoproject Django)
- [CVE-2026-77050](https://cve.now/CVE-2026-77050.md): Potential denial-of-service vulnerability in get\_supported\_language\_variant() (CVSS 5.3, djangoproject Django)
- [CVE-2026-82924](https://cve.now/CVE-2026-82924.md): PII Enumeration via Missing Rate Limiting in Pusula Communication's Expert Mail (CVSS 5.3, Pusula Communication, IT, and Internet Industry and Trade C…)
- [CVE-2026-105920](https://cve.now/CVE-2026-105920.md): Kusalkasilva Learning-Management-System Student Registration Endpoint student\_signup.php sql injection (CVSS 6.9, Kusalkasilva Learning-Management-System)
- [CVE-2025-15591](https://cve.now/CVE-2025-15591.md): Cross-Site Scripting (XSS) vulnerability identified in OpenText™ Content Management (CVSS 5.3, OpenText Content Management)
- [CVE-2026-12380](https://cve.now/CVE-2026-12380.md): Reflected XSS in Akıllı Ticaret's E-Commerce Pack (CVSS 6.1, Akıllı Ticaret Software Technologies Ltd. E-Commerce Pack)
- [CVE-2026-105919](https://cve.now/CVE-2026-105919.md): Kusalkasilva Learning-Management-System Administrator Login Endpoint login.php mysql\_query sql injection (CVSS 6.9, Kusalkasilva Learning-Management-System)
- [CVE-2026-105836](https://cve.now/CVE-2026-105836.md): QloApps through 1.7.0 Authorization Bypass via ajaxProcessBulkUpdateRooms (CVSS 5.3, Webkul QloApps)
- [CVE-2026-105835](https://cve.now/CVE-2026-105835.md): PLANKA 2.2.0 through 2.2.1 TOTP Brute Force via verify-totp Endpoint (CVSS 9.1, planka)
- [CVE-2026-105834](https://cve.now/CVE-2026-105834.md): Rundeck before 6.2.0 Arbitrary File Read via File Resource Model Source (CVSS 7.1, rundeck)
- [CVE-2026-106016](https://cve.now/CVE-2026-106016.md): Mitigation bypass in the File Handling component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-82531](https://cve.now/CVE-2026-82531.md): Smarty before 4.5.8 and 5.x before 5.8.5 PHP Code Injection via extends: Inheritance Cache (CVSS 9.2, smarty-php smarty)
- [CVE-2026-56596](https://cve.now/CVE-2026-56596.md): HCL BigFix Service Management is affected by multiple security vulnerabilities. (CVSS 3.5, HCL Software HCL BigFix Service Management)
- [CVE-2026-105918](https://cve.now/CVE-2026-105918.md): Kusalkasilva Learning-Management-System Login Endpoint login.php mysql\_error sql injection (CVSS 6.9, Kusalkasilva Learning-Management-System)
- [CVE-2026-75820](https://cve.now/CVE-2026-75820.md): Integer Truncation Leading to Heap Corruption in GNU Aspell (CVSS 1.8, GNU Aspell)
- [CVE-2026-75819](https://cve.now/CVE-2026-75819.md): Out-of-bounds Read in GNU Aspell (CVSS 1.8, GNU Aspell)
- [CVE-2026-75818](https://cve.now/CVE-2026-75818.md): Heap Buffer Overflow in GNU Aspell's prezip utility (CVSS 1.8, GNU Aspell)
- [CVE-2026-103831](https://cve.now/CVE-2026-103831.md): Insecure deserialization in the TrueLayer Magento 2 plugin (CVSS 7.5, TrueLayer Magento 2 Plugin)
- [CVE-2026-105985](https://cve.now/CVE-2026-105985.md): Authenticated RCE via render-components Entry Type overrides (CVSS 8.7, craftcms cms)
- [CVE-2026-84854](https://cve.now/CVE-2026-84854.md): Out of Bound Write on WibuKey for Windows (CVSS 7.0, wibu-systems-ag wibukey)
- [CVE-2026-80327](https://cve.now/CVE-2026-80327.md): Open Redirect in PingGateway Fragment Filter (CVSS 5.1, Ping Identity PingGateway)
- [CVE-2026-98372](https://cve.now/CVE-2026-98372.md): xfrm: iptfs: fix stack OOB read in iptfs\_skb\_reset\_frag\_walk() (no CVSS, Linux)
- [CVE-2026-98371](https://cve.now/CVE-2026-98371.md): xfrm: iptfs: fix runt reassembly panic from short inner tot\_len (no CVSS, Linux)
- [CVE-2026-98370](https://cve.now/CVE-2026-98370.md): xfrm: fix compat ALLOCSPI request use-after-free (no CVSS, Linux)
- [CVE-2026-98369](https://cve.now/CVE-2026-98369.md): xfrm: add missing rcu\_read\_lock(), skb\_dst\_force() and dev\_hold() for xfrm\_trans\_reinject() (CVSS 7.8, Linux)
- [CVE-2026-98368](https://cve.now/CVE-2026-98368.md): esp: downgrade zerocopy managed frags before mutating skb frags (CVSS 7.8, Linux)
- [CVE-2026-98367](https://cve.now/CVE-2026-98367.md): RDMA/siw: Clear association under lock if siw\_qp\_modify fails in siw\_accept (CVSS 7.8, Linux)
- [CVE-2026-98366](https://cve.now/CVE-2026-98366.md): RDMA/rxe: validate access flags before swapping the MR's PD (CVSS 7.8, Linux)
- [CVE-2026-98365](https://cve.now/CVE-2026-98365.md): RDMA/rxe: Fix integer overflow in mr\_check\_range() leading to OOB access (CVSS 9.8, Linux)
- [CVE-2026-98364](https://cve.now/CVE-2026-98364.md): xfrm: hold net\_device reference under RCU in bundle creation (CVSS 7.8, Linux)
- [CVE-2026-98363](https://cve.now/CVE-2026-98363.md): firmware: arm\_scpi: reject DVFS OPP count above MAX\_DVFS\_OPPS (no CVSS, Linux)
- [CVE-2026-98362](https://cve.now/CVE-2026-98362.md): clk: scpi: bound-check DVFS index in scpi\_dvfs\_recalc\_rate (no CVSS, Linux)
- [CVE-2026-98361](https://cve.now/CVE-2026-98361.md): RDMA/rxe: Restore HMM\_PFN\_WRITE check in ODP write paths (CVSS 7.8, Linux)
- [CVE-2026-98360](https://cve.now/CVE-2026-98360.md): RDMA/rxe: insert mcg into mcg\_tree only after rxe\_mcast\_add() succeeds (CVSS 7.0, Linux)
- [CVE-2026-98359](https://cve.now/CVE-2026-98359.md): RDMA/core: Reject unregistering netdevs in ib\_get\_eth\_speed (CVSS 7.0, Linux)
- [CVE-2026-98358](https://cve.now/CVE-2026-98358.md): IB/iser: reject a remote invalidation of an unregistered direction (no CVSS, Linux)
- [CVE-2026-98357](https://cve.now/CVE-2026-98357.md): IB/isert: wait for deferred control PDU completions before releasing the connection (CVSS 8.1, Linux)
- [CVE-2026-98356](https://cve.now/CVE-2026-98356.md): RDMA/bnxt\_re: check create\_singlethread\_workqueue() in DCB setup (no CVSS, Linux)
- [CVE-2026-98355](https://cve.now/CVE-2026-98355.md): RDMA/rtrs: guard against null kobj name (no CVSS, Linux)
- [CVE-2026-98354](https://cve.now/CVE-2026-98354.md): RDMA/mad: Fix receive buffer leak when PKey enforcement fails (no CVSS, Linux)
- [CVE-2026-98353](https://cve.now/CVE-2026-98353.md): RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (no CVSS, Linux)
- [CVE-2026-98352](https://cve.now/CVE-2026-98352.md): RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (no CVSS, Linux)
- [CVE-2026-98351](https://cve.now/CVE-2026-98351.md): wifi: virt\_wifi: free skb when disconnected (no CVSS, Linux)
- [CVE-2026-98350](https://cve.now/CVE-2026-98350.md): wifi: brcmfmac: cyw: pass PMKID to firmware if present (no CVSS, Linux)
- [CVE-2026-98349](https://cve.now/CVE-2026-98349.md): wifi: libipw: reject too-short beacon and probe responses (CVSS 7.1, Linux)
- [CVE-2026-98348](https://cve.now/CVE-2026-98348.md): wifi: libipw: reject too-short association responses (CVSS 7.1, Linux)
- [CVE-2026-98347](https://cve.now/CVE-2026-98347.md): IB/IPoIB: Avoid restoring OPER\_UP after multicast flush (no CVSS, Linux)
- [CVE-2026-98346](https://cve.now/CVE-2026-98346.md): wifi: cfg80211: don't get the radio mask for netdev-less wdevs (no CVSS, Linux)
- [CVE-2026-98345](https://cve.now/CVE-2026-98345.md): wifi: cfg80211: check IP header size in cfg80211\_classify8021d() (no CVSS, Linux)
- [CVE-2026-98344](https://cve.now/CVE-2026-98344.md): dmaengine: Fix device kref underflow in dma\_chan\_put() (no CVSS, Linux)
- [CVE-2026-98343](https://cve.now/CVE-2026-98343.md): dmaengine: fix use-after-free in dma\_chan\_put() and dma\_release\_channel() (no CVSS, Linux)
- [CVE-2026-98342](https://cve.now/CVE-2026-98342.md): dmaengine: wait for RCU readers before releasing dma\_device (no CVSS, Linux)
- [CVE-2026-98341](https://cve.now/CVE-2026-98341.md): wifi: cfg80211: don't free driver-owned scan requests (CVSS 7.8, Linux)
- [CVE-2026-98340](https://cve.now/CVE-2026-98340.md): wifi: cfg80211: only group hidden BSSes with beacon entries (no CVSS, Linux)
- [CVE-2026-98339](https://cve.now/CVE-2026-98339.md): wifi: cfg80211: don't filter by BSS type when removing stale entries (CVSS 8.8, Linux)
- [CVE-2026-98338](https://cve.now/CVE-2026-98338.md): wifi: cfg80211: ibss: ref BSS entry for joined event (no CVSS, Linux)
- [CVE-2026-98337](https://cve.now/CVE-2026-98337.md): wifi: mac80211: don't start a ROC while scanning (no CVSS, Linux)
- [CVE-2026-98336](https://cve.now/CVE-2026-98336.md): wifi: mac80211: don't offload TC setup on AP\_VLAN interfaces (no CVSS, Linux)
- [CVE-2026-98335](https://cve.now/CVE-2026-98335.md): wifi: mac80211: abort chanswitch when leaving a mesh (no CVSS, Linux)
- [CVE-2026-98334](https://cve.now/CVE-2026-98334.md): wifi: mac80211: reset state when starting AP fails (no CVSS, Linux)
- [CVE-2026-98333](https://cve.now/CVE-2026-98333.md): wifi: mac80211: reset the LED state when ifup fails (no CVSS, Linux)
- [CVE-2026-98332](https://cve.now/CVE-2026-98332.md): wifi: mac80211: only operate on TDLS peers in the TDLS code (no CVSS, Linux)
- [CVE-2026-98331](https://cve.now/CVE-2026-98331.md): wifi: mac80211: unlist vifs when their netdev is unregistered (CVSS 7.0, Linux)
- [CVE-2026-98330](https://cve.now/CVE-2026-98330.md): wifi: cfg80211: get the wiphy out of a dying network namespace (CVSS 7.0, Linux)
- [CVE-2026-98329](https://cve.now/CVE-2026-98329.md): wifi: mac80211: don't allow injecting frames wider than the chanctx (no CVSS, Linux)
- [CVE-2026-98328](https://cve.now/CVE-2026-98328.md): wifi: mac80211: add HE 6 GHz capability in the scan elems len (no CVSS, Linux)
- [CVE-2026-98327](https://cve.now/CVE-2026-98327.md): wifi: mac80211: mesh: reset the CSA state when leaving (no CVSS, Linux)
- [CVE-2026-98326](https://cve.now/CVE-2026-98326.md): wifi: mac80211: mesh: release the channel if start fails (no CVSS, Linux)
- [CVE-2026-98325](https://cve.now/CVE-2026-98325.md): wifi: mac80211: set up the TX info early to fix failure paths (no CVSS, Linux)
- [CVE-2026-98324](https://cve.now/CVE-2026-98324.md): dmaengine: pxa: fix double counting of the hw descriptors (CVSS 7.8, Linux)
- [CVE-2026-98323](https://cve.now/CVE-2026-98323.md): RDMA/siw: Bound fragmented header copies by the remaining length (CVSS 9.8, Linux)
- [CVE-2026-98322](https://cve.now/CVE-2026-98322.md): netfilter: nft\_nat: fully initialise new\_addr in netmap setup (no CVSS, Linux)
- [CVE-2026-98321](https://cve.now/CVE-2026-98321.md): netfilter: nf\_nat: unregister and release hooks on error (no CVSS, Linux)
- [CVE-2026-98320](https://cve.now/CVE-2026-98320.md): netfilter: flowtable: hold reference on ct until flow is released (CVSS 7.8, Linux)
- [CVE-2026-98319](https://cve.now/CVE-2026-98319.md): drm: Fix drm\_pending\_vblank\_event leak in error path for out\_fence\_ptr (no CVSS, Linux)
- [CVE-2026-98318](https://cve.now/CVE-2026-98318.md): smb: client: validate absolute native symlink targets before NT fixups (CVSS 7.8, Linux)
- [CVE-2026-98317](https://cve.now/CVE-2026-98317.md): neighbour: Enforce min/max to NDTPA\_INTERVAL\_PROBE\_TIME\_MS. (no CVSS, Linux)
- [CVE-2026-98316](https://cve.now/CVE-2026-98316.md): ALSA: bcd2000: Fix race between rawmidi and disconnect (no CVSS, Linux)
- [CVE-2026-98315](https://cve.now/CVE-2026-98315.md): ntfs: protect runlist updates with the runlist lock (CVSS 7.8, Linux)
- [CVE-2026-98314](https://cve.now/CVE-2026-98314.md): ALSA: pcm: set timer-\>private\_data before registering the PCM timer (no CVSS, Linux)
- [CVE-2026-98313](https://cve.now/CVE-2026-98313.md): drm/msm/dp: skip PUSH\_IDLE when the link was never enabled (no CVSS, Linux)
- [CVE-2026-98312](https://cve.now/CVE-2026-98312.md): ALSA: 6fire: fix OOB write from device-reported iso length (no CVSS, Linux)
- [CVE-2026-98311](https://cve.now/CVE-2026-98311.md): wifi: virt\_wifi: don't transfer operstate before register (CVSS 7.8, Linux)
- [CVE-2026-98310](https://cve.now/CVE-2026-98310.md): drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory (no CVSS, Linux)
- [CVE-2026-98309](https://cve.now/CVE-2026-98309.md): drm/vc4: Use managed KMS polling to fix UAF on unbind (no CVSS, Linux)
- [CVE-2026-98308](https://cve.now/CVE-2026-98308.md): ALSA: hda: trace PCM open only after assigning a stream (no CVSS, Linux)
- [CVE-2026-98307](https://cve.now/CVE-2026-98307.md): wifi: ath11k: cleanup arsta in ath11k\_mac\_peer\_cleanup\_all() (no CVSS, Linux)
- [CVE-2026-98306](https://cve.now/CVE-2026-98306.md): seg6: set IPSKB\_L3SLAVE from IP6SKB\_L3SLAVE on IPIP decapsulation (no CVSS, Linux)
- [CVE-2026-98305](https://cve.now/CVE-2026-98305.md): net: dsa: mxl862xx: disable the stats poll on teardown (CVSS 7.8, Linux)
- [CVE-2026-98304](https://cve.now/CVE-2026-98304.md): net: bcmgenet: restore the hardware filters on open (no CVSS, Linux)
- [CVE-2026-98303](https://cve.now/CVE-2026-98303.md): ipv4: icmp: reject RTN\_UNREACHABLE input routes in icmp\_route\_lookup (no CVSS, Linux)
- [CVE-2026-98302](https://cve.now/CVE-2026-98302.md): net: fddi: skfp: fix NULL deref when setting the MAC address while down (no CVSS, Linux)
- [CVE-2026-98301](https://cve.now/CVE-2026-98301.md): net: bridge: mst: move switchdev call outside rcu (no CVSS, Linux)
- [CVE-2026-98300](https://cve.now/CVE-2026-98300.md): tcp: Don't call skb\_clone\_and\_charge\_r() for close()d listener in tcp\_v6\_do\_rcv(). (no CVSS, Linux)
- [CVE-2026-98299](https://cve.now/CVE-2026-98299.md): tcp: do not let tcp\_rmem be set below 4096 (no CVSS, Linux)
- [CVE-2026-98298](https://cve.now/CVE-2026-98298.md): dmaengine: mmp\_pdma: fix wrong sg length in mmp\_pdma\_prep\_slave\_sg() (no CVSS, Linux)
- [CVE-2026-98297](https://cve.now/CVE-2026-98297.md): Bluetooth: hci\_core: Fix queuing tx\_work after workqueue is drained (no CVSS, Linux)
- [CVE-2026-98296](https://cve.now/CVE-2026-98296.md): Bluetooth: btintel\_pcie: validate TX skb length in send\_sync (no CVSS, Linux)
- [CVE-2026-98295](https://cve.now/CVE-2026-98295.md): Bluetooth: coredump: Quiesce dump work on unregister (no CVSS, Linux)
- [CVE-2026-98294](https://cve.now/CVE-2026-98294.md): Bluetooth: hci\_qca: Do not write to the serial port after it is closed (no CVSS, Linux)
- [CVE-2026-98293](https://cve.now/CVE-2026-98293.md): Bluetooth: ISO: Fix parent socket leak in iso\_conn\_ready() (no CVSS, Linux)
- [CVE-2026-98292](https://cve.now/CVE-2026-98292.md): Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (no CVSS, Linux)
- [CVE-2026-98291](https://cve.now/CVE-2026-98291.md): Bluetooth: btintel\_pcie: fix off-by-one bounds check in RX submit (no CVSS, Linux)
- [CVE-2026-98290](https://cve.now/CVE-2026-98290.md): Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (CVSS 7.5, Linux)
- [CVE-2026-98289](https://cve.now/CVE-2026-98289.md): af\_unix: Unify scc\_index when finalising SCC in \_\_unix\_walk\_scc(). (no CVSS, Linux)
- [CVE-2026-98288](https://cve.now/CVE-2026-98288.md): net: stmmac: fix TSO header length truncation (no CVSS, Linux)
- [CVE-2026-98287](https://cve.now/CVE-2026-98287.md): pppoatm: ensure a writable skb header and linear data (no CVSS, Linux)
- [CVE-2026-98286](https://cve.now/CVE-2026-98286.md): drop\_monitor: use timer\_shutdown\_sync() to prevent timer rearming during teardown (no CVSS, Linux)
- [CVE-2026-98285](https://cve.now/CVE-2026-98285.md): net: bridge: vlan: fix bugs caused by switchdev deletion errors (no CVSS, Linux)
- [CVE-2026-98284](https://cve.now/CVE-2026-98284.md): netlink: do not free nlk-\>groups while lockless readers can use it (no CVSS, Linux)
- [CVE-2026-98283](https://cve.now/CVE-2026-98283.md): KVM: PPC: Book3S HV: fix use-after-free in kvmhv\_emulate\_tlbie\_all\_lpid() (CVSS 8.8, Linux)
- [CVE-2026-98282](https://cve.now/CVE-2026-98282.md): powerpc/iommu: Fix the overflow validation in iommu\_tce\_check\_ioba (CVSS 8.8, Linux)
- [CVE-2026-98281](https://cve.now/CVE-2026-98281.md): futex: Also allocate private hash on vfork() (CVSS 7.8, Linux)
- [CVE-2026-98280](https://cve.now/CVE-2026-98280.md): drm/xe/i2c: Disable IRQ on unbind (no CVSS, Linux)
- [CVE-2026-98279](https://cve.now/CVE-2026-98279.md): btrfs: handle lack of space when cleaning up verity items (no CVSS, Linux)
- [CVE-2026-98278](https://cve.now/CVE-2026-98278.md): net: remove WARN\_ON\_ONCE() from the dev\_fill\_forward\_path() loop check (no CVSS, Linux)
- [CVE-2026-98277](https://cve.now/CVE-2026-98277.md): eth: fbnic: ring the doorbell if a burst ends in a drop (no CVSS, Linux)
- [CVE-2026-98276](https://cve.now/CVE-2026-98276.md): net: lock the socket in sock\_gettstamp() (CVSS 7.8, Linux)
- [CVE-2026-98275](https://cve.now/CVE-2026-98275.md): net: ethernet: cortina: Ack RX overrun interrupt correctly (no CVSS, Linux)
- [CVE-2026-98274](https://cve.now/CVE-2026-98274.md): net: psp: avoid conflicts with skb-\>decrypted and sk\_validate\_xmit\_skb() (no CVSS, Linux)
- [CVE-2026-98273](https://cve.now/CVE-2026-98273.md): x86/kprobes: Fix crash when probing CS CALL instructions (no CVSS, Linux)
- [CVE-2026-98272](https://cve.now/CVE-2026-98272.md): net: mvpp2: prevent buffer overflow in page\_pool allocation (no CVSS, Linux)
- [CVE-2026-98271](https://cve.now/CVE-2026-98271.md): net: skbuff: do not leave stale header offsets after pskb\_carve() (no CVSS, Linux)
- [CVE-2026-98270](https://cve.now/CVE-2026-98270.md): drm/amdgpu: check ras and obj before dereference (no CVSS, Linux)
- [CVE-2026-98269](https://cve.now/CVE-2026-98269.md): btrfs: abort transaction on failure to update inode for hole punching and reflinking (no CVSS, Linux)
- [CVE-2026-98268](https://cve.now/CVE-2026-98268.md): perf: Fix null pointer access in is\_include\_guest\_event() (no CVSS, Linux)
- [CVE-2026-98267](https://cve.now/CVE-2026-98267.md): 9p: Fix v9fs\_issue\_write() to update i\_size and remote\_i\_size (no CVSS, Linux)
- [CVE-2026-98266](https://cve.now/CVE-2026-98266.md): ALSA: core: Fix potential UAF after asynchronous card release (no CVSS, Linux)
- [CVE-2026-98265](https://cve.now/CVE-2026-98265.md): ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (no CVSS, Linux)
- [CVE-2026-98264](https://cve.now/CVE-2026-98264.md): ALSA: virtio: reset device before deleting virtqueues (no CVSS, Linux)
- [CVE-2026-98263](https://cve.now/CVE-2026-98263.md): ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream\_config-\>type (no CVSS, Linux)
- [CVE-2026-98262](https://cve.now/CVE-2026-98262.md): ata: libahci: clear PxCLBU and PxFBU for AHCI\_HFLAG\_32BIT\_ONLY (no CVSS, Linux)
- [CVE-2026-98261](https://cve.now/CVE-2026-98261.md): cifs: Fix server use-after-free in cifs\_chan\_skip\_or\_disable() (CVSS 8.1, Linux)
- [CVE-2026-98260](https://cve.now/CVE-2026-98260.md): exec: Cleanup POSIX timers right after de\_thread() (CVSS 7.8, Linux)
- [CVE-2026-98259](https://cve.now/CVE-2026-98259.md): fs/dax: check zero or empty entry before converting xarray entry (no CVSS, Linux)
- [CVE-2026-98258](https://cve.now/CVE-2026-98258.md): posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list (CVSS 7.8, Linux)
- [CVE-2026-98257](https://cve.now/CVE-2026-98257.md): rds: ib: use rds\_conn\_drop() on protocol version mismatch (CVSS 7.5, Linux)
- [CVE-2026-98256](https://cve.now/CVE-2026-98256.md): signal: Prevent exec() race (CVSS 7.8, Linux)
- [CVE-2026-98255](https://cve.now/CVE-2026-98255.md): tcp: exclude old ACKs from tcp fast path (no CVSS, Linux)
- [CVE-2026-98254](https://cve.now/CVE-2026-98254.md): swiotlb: use the adjusted address for the highmem page lookup (CVSS 7.8, Linux)
- [CVE-2026-98253](https://cve.now/CVE-2026-98253.md): RDMA/ucma: Serialize join and leave on copy\_to\_user failure (CVSS 7.8, Linux)
- [CVE-2026-98252](https://cve.now/CVE-2026-98252.md): RDMA/core: fix refcount bug in iwpm\_get\_nlmsg\_request() (CVSS 7.0, Linux)
- [CVE-2026-98251](https://cve.now/CVE-2026-98251.md): openvswitch: avoid reallocating confirmed conntrack labels (CVSS 7.8, Linux)
- [CVE-2026-98250](https://cve.now/CVE-2026-98250.md): nfsd: fix handling of NFSEXP\_PNFS in the netlink codepath (no CVSS, Linux)
- [CVE-2026-98249](https://cve.now/CVE-2026-98249.md): arm64: hibernate: pass HVC\_SET\_VECTORS args to the resume hvc (no CVSS, Linux)
- [CVE-2026-98248](https://cve.now/CVE-2026-98248.md): arm64: percpu: Fix LSE operations on {8,16}-bit types (no CVSS, Linux)
- [CVE-2026-98247](https://cve.now/CVE-2026-98247.md): Bluetooth: hci\_codec: validate vendor codec count length (no CVSS, Linux)
- [CVE-2026-98246](https://cve.now/CVE-2026-98246.md): Bluetooth: hci\_sync: Serialize local codec list cleanup (no CVSS, Linux)
- [CVE-2026-98245](https://cve.now/CVE-2026-98245.md): btrfs: take commit root semaphore when iterating in mark\_block\_group\_to\_copy() (no CVSS, Linux)
- [CVE-2026-98244](https://cve.now/CVE-2026-98244.md): btrfs: clear free space tree creation state on rebuild failure (no CVSS, Linux)
- [CVE-2026-98243](https://cve.now/CVE-2026-98243.md): dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3 (CVSS 7.1, Linux)
- [CVE-2026-98242](https://cve.now/CVE-2026-98242.md): dma-buf: Fix silent overflow for phys vec to sgt (no CVSS, Linux)
- [CVE-2026-98241](https://cve.now/CVE-2026-98241.md): ipv6: xfrm: use full sockets in local error paths (CVSS 7.8, Linux)
- [CVE-2026-98240](https://cve.now/CVE-2026-98240.md): net: ip\_tunnel: initialize \`options\_len\` before referencing options (no CVSS, Linux)
- [CVE-2026-98239](https://cve.now/CVE-2026-98239.md): net: lan743x: fix RX checksum use-after-free (CVSS 8.1, Linux)
- [CVE-2026-98238](https://cve.now/CVE-2026-98238.md): net: wwan: t7xx: validate the netif index in t7xx\_ccmni\_recv\_skb() (no CVSS, Linux)
- [CVE-2026-98237](https://cve.now/CVE-2026-98237.md): net: wwan: mhi\_wwan\_mbim: guard against a cyclic NDP chain (no CVSS, Linux)
- [CVE-2026-98236](https://cve.now/CVE-2026-98236.md): net: wwan: mhi\_wwan\_mbim: check skb\_copy\_bits() return value (no CVSS, Linux)
- [CVE-2026-98235](https://cve.now/CVE-2026-98235.md): net/sched: act\_api: release tail references on DELACTION failure (no CVSS, Linux)
- [CVE-2026-98234](https://cve.now/CVE-2026-98234.md): net/sched: hhf: cap hh\_flows\_limit at change time (no CVSS, Linux)
- [CVE-2026-98233](https://cve.now/CVE-2026-98233.md): net/packet: clear RX owner on VNET header error (no CVSS, Linux)
- [CVE-2026-98232](https://cve.now/CVE-2026-98232.md): scsi: core: Validate MODE SENSE lengths in scsi\_cdl\_enable() (no CVSS, Linux)
- [CVE-2026-98231](https://cve.now/CVE-2026-98231.md): xfrm: serialize state GC with device state flush (no CVSS, Linux)
- [CVE-2026-98230](https://cve.now/CVE-2026-98230.md): xfrm: use hlist\_del\_init\_rcu for state\_cache and state\_cache\_input (CVSS 7.0, Linux)
- [CVE-2026-98229](https://cve.now/CVE-2026-98229.md): xfrm: save input state data before secpath resets (CVSS 7.8, Linux)
- [CVE-2026-98228](https://cve.now/CVE-2026-98228.md): mips: select CONFIG\_WEAK\_REORDERING\_BEYOND\_LLSC from CONFIG\_EYEQ (CVSS 7.8, Linux)
- [CVE-2026-98227](https://cve.now/CVE-2026-98227.md): memstick: ms\_block: destroy io\_queue workqueue on removal (no CVSS, Linux)
- [CVE-2026-98226](https://cve.now/CVE-2026-98226.md): mm, swap: fix SWAP\_USAGE\_OFFLIST\_BIT collision with real usage count (no CVSS, Linux)
- [CVE-2026-98225](https://cve.now/CVE-2026-98225.md): mm/shrinker: fix bogus set\_shrinker\_bit() with cgroup.memory=nokmem (no CVSS, Linux)
- [CVE-2026-98224](https://cve.now/CVE-2026-98224.md): mm/vma: correctly unaccount on mmap\_prepare() failure (no CVSS, Linux)
- [CVE-2026-98223](https://cve.now/CVE-2026-98223.md): mm: filemap: retain mapped dropbehind folios (no CVSS, Linux)
- [CVE-2026-98222](https://cve.now/CVE-2026-98222.md): KEYS: encrypted: fix integer overflow of datablob\_len (no CVSS, Linux)
- [CVE-2026-98221](https://cve.now/CVE-2026-98221.md): KEYS: trusted: Fix tpm2\_load\_cmd() boundary check (no CVSS, Linux)
- [CVE-2026-98220](https://cve.now/CVE-2026-98220.md): sched\_ext: Fix NULL sched deref in kfunc sub-sched error paths (no CVSS, Linux)
- [CVE-2026-98219](https://cve.now/CVE-2026-98219.md): sched\_ext: Close the pre-enable ops error claim window (no CVSS, Linux)
- [CVE-2026-98218](https://cve.now/CVE-2026-98218.md): i2c: atr: fix dangling adapter pointer on add failure (no CVSS, Linux)
- [CVE-2026-98217](https://cve.now/CVE-2026-98217.md): IB/mlx4: Fix use-after-free on pkey sysfs registration failure (no CVSS, Linux)
- [CVE-2026-98216](https://cve.now/CVE-2026-98216.md): IB/hfi1: Fix the PIO\_CRED credit-return mmap (CVSS 7.1, Linux)
- [CVE-2026-98215](https://cve.now/CVE-2026-98215.md): selinux: preserve user SID across nested backing files (no CVSS, Linux)
- [CVE-2026-98214](https://cve.now/CVE-2026-98214.md): selinux: recheck intermediate backing files on mprotect() (no CVSS, Linux)
- [CVE-2026-98213](https://cve.now/CVE-2026-98213.md): mmc: core: Cancel SDIO IRQ work before freeing host (no CVSS, Linux)
- [CVE-2026-98212](https://cve.now/CVE-2026-98212.md): mmc: hsq: Fix use-after-free in retry work (no CVSS, Linux)
- [CVE-2026-98211](https://cve.now/CVE-2026-98211.md): mmc: mmci: Fix use-after-free in busy-timeout work (no CVSS, Linux)
- [CVE-2026-98210](https://cve.now/CVE-2026-98210.md): mmc: mxcmmc: cancel data work and watchdog on remove (no CVSS, Linux)
- [CVE-2026-98209](https://cve.now/CVE-2026-98209.md): mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (no CVSS, Linux)
- [CVE-2026-98208](https://cve.now/CVE-2026-98208.md): mmc: sdio\_uart: fix xmit\_fifo leak when the port table is full (no CVSS, Linux)
- [CVE-2026-98207](https://cve.now/CVE-2026-98207.md): mmc: spi: reset bytes\_xfered before retrying CRC failures (no CVSS, Linux)
- [CVE-2026-98206](https://cve.now/CVE-2026-98206.md): Input: cyttsp5 - clamp the HID report size before memcpy (no CVSS, Linux)
- [CVE-2026-98205](https://cve.now/CVE-2026-98205.md): Input: evdev - zero absinfo before partial copy in EVIOCSABS (no CVSS, Linux)
- [CVE-2026-98204](https://cve.now/CVE-2026-98204.md): Input: rmi\_smbus - fix out-of-bounds read in rmi\_smb\_write\_block() (no CVSS, Linux)
- [CVE-2026-98203](https://cve.now/CVE-2026-98203.md): Input: soc\_button\_array - check btns\_desc-\>package.count (no CVSS, Linux)
- [CVE-2026-98202](https://cve.now/CVE-2026-98202.md): Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (no CVSS, Linux)
- [CVE-2026-98201](https://cve.now/CVE-2026-98201.md): Input: zero ff\_effect before compat copy in input\_ff\_effect\_from\_user (no CVSS, Linux)
- [CVE-2026-98200](https://cve.now/CVE-2026-98200.md): hwmon: (hp-wmi-sensors) Fix use-after-free in fungible\_show() (no CVSS, Linux)
- [CVE-2026-98199](https://cve.now/CVE-2026-98199.md): hwmon: (pmbus/core) increase number of phases and add new mask (no CVSS, Linux)
- [CVE-2026-98198](https://cve.now/CVE-2026-98198.md): hwmon: (pwm-fan) Stop RPM timer before freeing tach data (no CVSS, Linux)
- [CVE-2026-98197](https://cve.now/CVE-2026-98197.md): hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (CVSS 7.0, Linux)
- [CVE-2026-98196](https://cve.now/CVE-2026-98196.md): wifi: brcmsmac: fix UAF in brcms\_free\_timer() (no CVSS, Linux)
- [CVE-2026-98195](https://cve.now/CVE-2026-98195.md): wifi: iwlegacy: fix broadcast stations deallocation (no CVSS, Linux)
- [CVE-2026-98194](https://cve.now/CVE-2026-98194.md): wifi: libertas\_tf: fix UAF in lbtf\_free\_adapter() (no CVSS, Linux)
- [CVE-2026-98193](https://cve.now/CVE-2026-98193.md): wifi: libipw: reject TKIP frames without a full MIC (no CVSS, Linux)
- [CVE-2026-98192](https://cve.now/CVE-2026-98192.md): wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown (no CVSS, Linux)
- [CVE-2026-98191](https://cve.now/CVE-2026-98191.md): wifi: wlcore: release runtime PM ref on regdomain config failure (no CVSS, Linux)
- [CVE-2026-98190](https://cve.now/CVE-2026-98190.md): wifi: wilc1000: fix out-of-bounds read in P2P public action frames (no CVSS, Linux)
- [CVE-2026-98189](https://cve.now/CVE-2026-98189.md): wifi: wilc1000: fix RX buffer OOB-write in wilc\_wlan\_handle\_isr\_ext() (no CVSS, Linux)
- [CVE-2026-98188](https://cve.now/CVE-2026-98188.md): wifi: p54: validate curve data length in the calibration curve converters (no CVSS, Linux)
- [CVE-2026-98187](https://cve.now/CVE-2026-98187.md): wifi: p54: require a full exp\_if record in PDR\_INTERFACE\_LIST (no CVSS, Linux)
- [CVE-2026-98186](https://cve.now/CVE-2026-98186.md): wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (no CVSS, Linux)
- [CVE-2026-98185](https://cve.now/CVE-2026-98185.md): wifi: mwifiex: validate scan response extents (no CVSS, Linux)
- [CVE-2026-98184](https://cve.now/CVE-2026-98184.md): wifi: mwifiex: prevent authentication frame length truncation (no CVSS, Linux)
- [CVE-2026-98183](https://cve.now/CVE-2026-98183.md): wifi: mac80211: avoid out-of-bounds read for empty PREQ elements (no CVSS, Linux)
- [CVE-2026-98182](https://cve.now/CVE-2026-98182.md): wifi: mac80211: refuse to make a monitor active when it has no queue (no CVSS, Linux)
- [CVE-2026-98181](https://cve.now/CVE-2026-98181.md): drm/gud: fix out-of-bounds write in gud\_plane\_atomic\_check() (no CVSS, Linux)
- [CVE-2026-98180](https://cve.now/CVE-2026-98180.md): drm/msm: RCU-free the scheduler-containing ring and VM objects (CVSS 7.1, Linux)
- [CVE-2026-98179](https://cve.now/CVE-2026-98179.md): drm/amdgpu: fix rmmio iounmap skipped on device removal (no CVSS, Linux)
- [CVE-2026-98178](https://cve.now/CVE-2026-98178.md): drm/amdgpu: Skip KFD mapping clear before initialization (no CVSS, Linux)
- [CVE-2026-98177](https://cve.now/CVE-2026-98177.md): drm/amdkfd: Avoid integer underflow in EOP ring size calculation. (no CVSS, Linux)
- [CVE-2026-98176](https://cve.now/CVE-2026-98176.md): drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc (no CVSS, Linux)
- [CVE-2026-98175](https://cve.now/CVE-2026-98175.md): smb: client: cancel reconnect work in clean\_demultiplex\_info() (CVSS 7.5, Linux)
- [CVE-2026-98174](https://cve.now/CVE-2026-98174.md): smb: client: fix rlist race and missing initialization (CVSS 7.5, Linux)
- [CVE-2026-98173](https://cve.now/CVE-2026-98173.md): smb: client: fix use-after-free of iface in cifs\_try\_adding\_channels() (CVSS 7.5, Linux)
- [CVE-2026-98172](https://cve.now/CVE-2026-98172.md): smb: client: fix smbd\_connection leak on cifs\_get\_tcp\_session() error (no CVSS, Linux)
- [CVE-2026-98171](https://cve.now/CVE-2026-98171.md): smb: client: fix next\_buffer UAF and NextCommand bounds in compound PDUs (CVSS 8.8, Linux)
- [CVE-2026-98170](https://cve.now/CVE-2026-98170.md): smb: client: fix OOB struct field reads in move\_smb2\_ea\_to\_cifs() (no CVSS, Linux)
- [CVE-2026-98169](https://cve.now/CVE-2026-98169.md): smb: client: fix potential OOB read in smb3\_enum\_snapshots() (CVSS 7.1, Linux)
- [CVE-2026-98168](https://cve.now/CVE-2026-98168.md): smb: client: fix reparse buffer bounds in cifs\_query\_reparse\_point() (no CVSS, Linux)
- [CVE-2026-98167](https://cve.now/CVE-2026-98167.md): smb: client: fix server-\>total\_read for compound encrypted PDUs (no CVSS, Linux)
- [CVE-2026-98166](https://cve.now/CVE-2026-98166.md): drm/ttm: fix swapped-out resources never leaving their bulk\_move range (CVSS 7.8, Linux)
- [CVE-2026-104399](https://cve.now/CVE-2026-104399.md): WordPress Motors plugin \<= 1.4.124 - Sensitive Data Exposure vulnerability (CVSS 6.9, StylemixThemes Motors)
- [CVE-2026-94206](https://cve.now/CVE-2026-94206.md): Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds (CVSS 6.3, danielberkompas cloak\_ecto · danielberkompas cloak +2)
- [CVE-2026-95105](https://cve.now/CVE-2026-95105.md): Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping (CVSS 8.2, danielberkompas cloak · cloak)
- [CVE-2026-105317](https://cve.now/CVE-2026-105317.md): WordPress Paid Member Subscriptions plugin \<= 3.1.1 - SQL Injection vulnerability (CVSS 8.5, Cozmoslabs Paid Member Subscriptions)
- [CVE-2026-105071](https://cve.now/CVE-2026-105071.md): WordPress SiteVault – Backup, Restore, Migration & Cloning plugin \<= 1.5.17 - Sensitive Data Exposure vulnerability (CVSS 7.5, Royal Plugins SiteVault – Backup, Restore, Migration &amp;…)
- [CVE-2026-105070](https://cve.now/CVE-2026-105070.md): WordPress Salon booking system plugin \<= 10.31.7 - Privilege Escalation vulnerability (CVSS 8.8, Dimitri Grassi Salon booking system)
- [CVE-2026-105061](https://cve.now/CVE-2026-105061.md): WordPress WP Mailster plugin \<= 1.9.0.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Bởi brandtoss WP Mailster)
- [CVE-2026-105059](https://cve.now/CVE-2026-105059.md): WordPress Delete All Comments of wordpress plugin \<= 7.1 - Broken Access Control vulnerability (CVSS 6.5, royalnavneet Delete All Comments of wordpress)
- [CVE-2026-105058](https://cve.now/CVE-2026-105058.md): WordPress WP User Profiles plugin \<= 2.7.3 - Privilege Escalation vulnerability (CVSS 8.8, John James Jacoby WP User Profiles)
- [CVE-2026-105057](https://cve.now/CVE-2026-105057.md): WordPress Zero Spam plugin \<= 5.7.11 - Bypass vulnerability vulnerability (CVSS 5.3, Ben Marshall Zero Spam)
- [CVE-2026-104814](https://cve.now/CVE-2026-104814.md): WordPress Form Block plugin \<= 1.8.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, epiphyt Form Block)
- [CVE-2026-104757](https://cve.now/CVE-2026-104757.md): WordPress Import and export users and customers plugin \<= 2.5.5 - Privilege Escalation vulnerability (CVSS 7.2, Javier Carazo Import and export users and customers)
- [CVE-2026-104747](https://cve.now/CVE-2026-104747.md): WordPress Haaken theme \<= 1.5 - PHP Object Injection vulnerability (CVSS 8.1, Edge-Themes Haaken)
- [CVE-2026-104672](https://cve.now/CVE-2026-104672.md): WordPress GiveWP plugin \<= 4.17.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Nexcess GiveWP)
- [CVE-2026-104670](https://cve.now/CVE-2026-104670.md): WordPress LearnPress plugin \<= 4.4.9 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThimPress LearnPress)
- [CVE-2026-104406](https://cve.now/CVE-2026-104406.md): WordPress picu plugin \<= 3.10.1 - Broken Access Control vulnerability (CVSS 7.3, picu)
- [CVE-2026-104405](https://cve.now/CVE-2026-104405.md): WordPress GiveWP plugin \<= 4.17.0 - Privilege Escalation vulnerability (CVSS 8.1, Nexcess GiveWP)
- [CVE-2026-104395](https://cve.now/CVE-2026-104395.md): WordPress picu plugin \<= 3.10.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, picu)
- [CVE-2026-104394](https://cve.now/CVE-2026-104394.md): WordPress Charitable plugin \<= 1.8.12.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Syed Balkhi Charitable)
- [CVE-2026-104387](https://cve.now/CVE-2026-104387.md): WordPress PowerPress Podcasting plugin \<= 11.17.9 - Broken Access Control vulnerability (CVSS 7.2, blubrry PowerPress Podcasting)
- [CVE-2026-104385](https://cve.now/CVE-2026-104385.md): WordPress Groundhogg plugin \<= 4.8.3 - Sensitive Data Exposure vulnerability (CVSS 7.5, Adrian Tobey Groundhogg)
- [CVE-2026-102915](https://cve.now/CVE-2026-102915.md): WordPress WPO365 plugin \<= 44.1 - Broken Access Control vulnerability (CVSS 8.5, Marco van Wieren WPO365)
- [CVE-2026-102387](https://cve.now/CVE-2026-102387.md): WordPress Xserver Migrator plugin \<= 1.6.6 - Sensitive Data Exposure vulnerability (CVSS 7.5, Xserver Migrator)
- [CVE-2026-100518](https://cve.now/CVE-2026-100518.md): WordPress Advanced Google reCAPTCHA plugin \<= 5.40 - Broken Authentication vulnerability (CVSS 5.3, WebFactory Advanced Google reCAPTCHA)
- [CVE-2026-97308](https://cve.now/CVE-2026-97308.md): WordPress Login Lockdown plugin \<= 2.17 - Bypass Vulnerability vulnerability (CVSS 4.8, WebFactory Login Lockdown)
- [CVE-2026-95594](https://cve.now/CVE-2026-95594.md): WordPress SMS Alert Order Notifications plugin \<= 4.0.0 - Privilege Escalation vulnerability (CVSS 8.1, Cozy Vision Technologies Pvt. SMS Alert Order Notifications)
- [CVE-2026-95526](https://cve.now/CVE-2026-95526.md): WordPress BEAR plugin \<= 1.2.2 - Broken Access Control vulnerability (CVSS 7.3, RealMag777 BEAR)
- [CVE-2026-94675](https://cve.now/CVE-2026-94675.md): WordPress Fluent Forms Pro Add On Pack plugin \<= 6.2.13 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Fluent Forms Free vs Pro Fluent Forms Pro Add On Pack)
- [CVE-2026-62072](https://cve.now/CVE-2026-62072.md): WordPress Progress Planner plugin \<= 1.10.0 - Broken Access Control vulnerability (CVSS 8.8, Progress Planner)
- [CVE-2026-48199](https://cve.now/CVE-2026-48199.md): WordPress Sermon'e plugin \<= 1.0.2 - Broken Access Control vulnerability (CVSS 7.5, Beplusthemes Sermon'e)
- [CVE-2026-48197](https://cve.now/CVE-2026-48197.md): WordPress PublishPress Capabilities plugin \<= 2.45.0 - Privilege Escalation vulnerability (CVSS 7.2, PublishPress Capabilities)
- [CVE-2026-42638](https://cve.now/CVE-2026-42638.md): WordPress Easy Digital Downloads plugin \<= 3.7.1 - Broken Access Control vulnerability (CVSS 7.5, Awesomemotive Easy Digital Downloads)
- [CVE-2026-42637](https://cve.now/CVE-2026-42637.md): WordPress PayPlug for WooCommerce (Official) plugin \<= 3.1.0 - Settings Change vulnerability (CVSS 6.5, PayPlug for WooCommerce)
- [CVE-2026-42636](https://cve.now/CVE-2026-42636.md): WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin \<= 4.4.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy C…)
- [CVE-2026-42635](https://cve.now/CVE-2026-42635.md): WordPress WooCommerce Simple Auctions plugin \<= 3.0.10 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, wpgenie WooCommerce Simple Auctions)
- [CVE-2026-42634](https://cve.now/CVE-2026-42634.md): WordPress Video Background Block – Use video as background in the section. plugin \<= 2.0.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, bPlugins Video Background Block – Use video as background i…)
- [CVE-2026-42418](https://cve.now/CVE-2026-42418.md): WordPress Social Rocket plugin \<= 1.3.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Socialrocket Social Rocket)
- [CVE-2026-42417](https://cve.now/CVE-2026-42417.md): WordPress ARMember Premium plugin \<= 7.8 - SQL Injection vulnerability (CVSS 9.3, reputeinfosystems ARMember Premium)
- [CVE-2026-42416](https://cve.now/CVE-2026-42416.md): WordPress UDesign Core plugin \<= 4.15.0 - SQL Injection vulnerability (CVSS 8.5, AndonDesign UDesign Core)
- [CVE-2026-42415](https://cve.now/CVE-2026-42415.md): WordPress Porto Theme - Functionality plugin \<= 3.9.3 - SQL Injection vulnerability (CVSS 9.3, p-themes Porto Theme - Functionality)
- [CVE-2026-42414](https://cve.now/CVE-2026-42414.md): WordPress ListingPro plugin \<= 2.9.12 - SQL Injection vulnerability (CVSS 8.5, CridioStudio ListingPro)
- [CVE-2026-42413](https://cve.now/CVE-2026-42413.md): WordPress Snapshotify – All-in-One Backup & Restore & Migrate plugin \<= 1.3.2 - Sensitive Data Exposure vulnerability (CVSS 7.5, DaftPlug Snapshotify &#8211; All-in-One Backup &amp; Restor…)
- [CVE-2026-41562](https://cve.now/CVE-2026-41562.md): WordPress Norvis Backup plugin \<= 1.1.0 - Sensitive Data Exposure vulnerability (CVSS 7.5, norvisgabriel Norvis Backup)
- [CVE-2026-41561](https://cve.now/CVE-2026-41561.md): WordPress Museder RestoreOne plugin \<= 2.7.276 - Sensitive Data Exposure vulnerability (CVSS 7.5, Adrian Lin Museder RestoreOne)
- [CVE-2026-41560](https://cve.now/CVE-2026-41560.md): WordPress WXD Backup Lite plugin \<= 1.0.2 - Broken Access Control vulnerability (CVSS 7.5, wxdlabs WXD Backup Lite)
- [CVE-2026-41559](https://cve.now/CVE-2026-41559.md): WordPress SafeSnap – Verified WordPress Backup & Restore plugin \<= 2.1.2 - Sensitive Data Exposure vulnerability (CVSS 7.5, Pluginjoy SafeSnap – Verified WordPress Backup &amp; Restore)
- [CVE-2026-41555](https://cve.now/CVE-2026-41555.md): WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin \<= 1.5.9 - SQL Injection vulnerability (CVSS 9.3, Weblizar – WordPress Themes & Plugin Newsletter Subscriptio…)
- [CVE-2026-40807](https://cve.now/CVE-2026-40807.md): WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin \<= 3.2.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Aman CF7 Views &#8211; Complete Entry Management for Contac…)
- [CVE-2026-40806](https://cve.now/CVE-2026-40806.md): WordPress Blog, Posts and Category Filter for Elementor plugin \<= 2.1.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Plugin Devs Blog, Posts and Category Filter for Elementor)
- [CVE-2026-39798](https://cve.now/CVE-2026-39798.md): WordPress TrueBooker plugin \<= 1.2.9 - Settings Change vulnerability (CVSS 6.5, ThemetechMount TrueBooker)
- [CVE-2026-39797](https://cve.now/CVE-2026-39797.md): WordPress GDPR Framework By Data443 plugin \<= 2.5.0 - PHP Object Injection vulnerability (CVSS 9.8, Data443 Risk Mitigation GDPR Framework By Data443)
- [CVE-2026-39796](https://cve.now/CVE-2026-39796.md): WordPress Advanced Posts Listing – Show Post List Easily plugin \<= 1.0.8 - Broken Access Control vulnerability (CVSS 7.5, Flipper Code – WordPress Development Company Advanced Posts…)
- [CVE-2026-39795](https://cve.now/CVE-2026-39795.md): WordPress SendPress Newsletters plugin \<= 1.26.1.20 - SQL Injection vulnerability (CVSS 9.3, brewlabs SendPress Newsletters)
- [CVE-2026-39794](https://cve.now/CVE-2026-39794.md): WordPress WooCommerce Multivendor Marketplace – REST API plugin \<= 1.6.3 - Broken Access Control vulnerability (CVSS 7.5, WC Lovers WooCommerce Multivendor Marketplace – REST API)
- [CVE-2026-39793](https://cve.now/CVE-2026-39793.md): WordPress Simple JWT Login plugin 4.0.0 - Broken Authentication vulnerability (CVSS 8.8, Nicu Micle Simple JWT Login)
- [CVE-2026-39792](https://cve.now/CVE-2026-39792.md): WordPress Simple File List plugin \<= 6.3.11 - Arbitrary File Deletion vulnerability (CVSS 8.6, Mitchell Bennis Simple File List)
- [CVE-2026-39791](https://cve.now/CVE-2026-39791.md): WordPress Mailjet Email Marketing plugin \<= 6.2.3 - Sensitive Data Exposure vulnerability (CVSS 5.3, Mailjet Email Marketing)
- [CVE-2026-39790](https://cve.now/CVE-2026-39790.md): WordPress VikRentCar plugin \<= 1.4.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, e4jvikwp VikRentCar)
- [CVE-2026-39788](https://cve.now/CVE-2026-39788.md): WordPress Front End PM plugin \<= 11.4.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Shamim Hasan Front End PM)
- [CVE-2026-39787](https://cve.now/CVE-2026-39787.md): WordPress 10Web Social Photo Feed plugin \<= 1.4.35 - Broken Access Control vulnerability (CVSS 6.5, 10Web Social Photo Feed)
- [CVE-2026-39785](https://cve.now/CVE-2026-39785.md): WordPress Gmedia Photo Gallery plugin \<= 1.25.1 - SQL Injection vulnerability (CVSS 9.3, Serhii Pasyuk Gmedia Photo Gallery)
- [CVE-2026-39784](https://cve.now/CVE-2026-39784.md): WordPress Hotel Booking plugin \<= 3.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, nicdark Hotel Booking)
- [CVE-2026-39781](https://cve.now/CVE-2026-39781.md): WordPress Document Gallery plugin \<= 5.1.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Dan Rossiter Document Gallery)
- [CVE-2026-39780](https://cve.now/CVE-2026-39780.md): WordPress Youzify plugin \<= 1.3.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Youzify)
- [CVE-2026-39778](https://cve.now/CVE-2026-39778.md): WordPress Ansar Import – One Click Starter Sites – for Elementor & Themes plugin \<= 2.1.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, themeansar Ansar Import – One Click Starter Sites – for Ele…)
- [CVE-2026-39776](https://cve.now/CVE-2026-39776.md): WordPress Tabs plugin \<= 2.5 - Remote Code Execution (RCE) vulnerability (CVSS 8.0, wpshopmart Tabs)
- [CVE-2026-39775](https://cve.now/CVE-2026-39775.md): WordPress JobZilla - Job Board WordPress Theme theme \<= 2.2 - Privilege Escalation vulnerability (CVSS 8.8, DexignZone JobZilla - Job Board WordPress Theme)
- [CVE-2026-39774](https://cve.now/CVE-2026-39774.md): WordPress Tourfic Pro plugin \<= 1.17.3 - Privilege Escalation vulnerability (CVSS 8.8, Tourfic AI Studio Tourfic Pro)
- [CVE-2026-39773](https://cve.now/CVE-2026-39773.md): WordPress Doctreat Core plugin \<= 1.7.0 - Privilege Escalation vulnerability (CVSS 10.0, AmentoTech Doctreat Core)
- [CVE-2026-39772](https://cve.now/CVE-2026-39772.md): WordPress Captcha by BestWebSoft plugin \<= 5.2.8 - Bypass Vulnerability vulnerability (CVSS 5.3, Captcha by BestWebSoft)
- [CVE-2026-39771](https://cve.now/CVE-2026-39771.md): WordPress Buddyboss Platform plugin \<= 3.1.0 - SQL Injection vulnerability (CVSS 8.5, MightyNetworks vs BuddyBoss Buddyboss Platform)
- [CVE-2026-39770](https://cve.now/CVE-2026-39770.md): WordPress Doctreat theme \<= 1.7.0 - Arbitrary File Upload vulnerability (CVSS 10.0, AmentoTech Doctreat)
- [CVE-2026-39769](https://cve.now/CVE-2026-39769.md): WordPress Graphina plugin \<= 3.1.12 - Broken Authentication vulnerability (CVSS 7.5, Iqonic Designs Graphina – Charts and Graphs For Elementor)
- [CVE-2026-39767](https://cve.now/CVE-2026-39767.md): WordPress WPBase Cache plugin \<= 5.5.6 - Denial of Service Attack vulnerability (CVSS 6.5, baseapp WPBase Cache)
- [CVE-2026-39766](https://cve.now/CVE-2026-39766.md): WordPress ARForms plugin \<= 7.1.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, reputeinfosystems ARForms)
- [CVE-2026-39765](https://cve.now/CVE-2026-39765.md): WordPress Challan plugin \<= 3.7.88 - Privilege Escalation vulnerability (CVSS 7.2, WebAppick Challan)
- [CVE-2026-39764](https://cve.now/CVE-2026-39764.md): WordPress Radius Booking — Booking Calendar for Appointments & Services plugin \<= 1.0.19 - SQL Injection vulnerability (CVSS 9.3, RadiusTheme Radius Booking — Booking Calendar for Appointme…)
- [CVE-2026-39762](https://cve.now/CVE-2026-39762.md): WordPress Autoship Cloud for WooCommerce Subscription Products plugin \<= 2.17.1 - Broken Access Control vulnerability (CVSS 6.5, Patterns In The Cloud Autoship Cloud for WooCommerce Subscr…)
- [CVE-2026-39761](https://cve.now/CVE-2026-39761.md): WordPress Meta Box AIO plugin \<= 3.7.1 - Privilege Escalation vulnerability (CVSS 9.8, eLightUp Meta Box AIO)
- [CVE-2026-39759](https://cve.now/CVE-2026-39759.md): WordPress Workreap Core plugin \<= 3.4.5 - Arbitrary File Upload vulnerability (CVSS 9.9, AmentoTech Workreap Core)
- [CVE-2026-39758](https://cve.now/CVE-2026-39758.md): WordPress Midtrans-WooCommerce plugin \<= 2.32.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Midtrans-WooCommerce)
- [CVE-2026-39757](https://cve.now/CVE-2026-39757.md): WordPress Taskbot plugin \<= 6.6 - Arbitrary File Upload vulnerability (CVSS 9.9, AmentoTech Taskbot)
- [CVE-2026-39756](https://cve.now/CVE-2026-39756.md): WordPress Wappointment plugin \<= 2.7.7 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5, Wappointment team Wappointment)
- [CVE-2026-39755](https://cve.now/CVE-2026-39755.md): WordPress WP Duplicate plugin \<= 1.1.11 - Arbitrary File Upload vulnerability (CVSS 9.9, revmakx WP Duplicate)
- [CVE-2026-39754](https://cve.now/CVE-2026-39754.md): WordPress Piotnet Addons For Elementor plugin \<= 7.1.71 - Arbitrary File Download vulnerability (CVSS 6.5, About Piotnet Piotnet Addons For Elementor)
- [CVE-2026-39753](https://cve.now/CVE-2026-39753.md): WordPress Taskbot plugin \<= 6.6 - Privilege Escalation vulnerability (CVSS 9.8, AmentoTech Taskbot)
- [CVE-2026-39752](https://cve.now/CVE-2026-39752.md): WordPress Jobs for WordPress plugin \<= 2.8.2 - Arbitrary File Deletion vulnerability (CVSS 7.7, BlueGlass Interactive AG Jobs for WordPress)
- [CVE-2026-39751](https://cve.now/CVE-2026-39751.md): WordPress PayPlug for WooCommerce (Official) plugin \<= 3.1.0 - Broken Access Control vulnerability (CVSS 7.5, PayPlug for WooCommerce)
- [CVE-2026-39750](https://cve.now/CVE-2026-39750.md): WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin \<= 2.0.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, weDevs StoreGrowth: Smart Sales Booster for WooCommerce | B…)
- [CVE-2026-39749](https://cve.now/CVE-2026-39749.md): WordPress App for Cloudflare® plugin \<= 1.10.1 - Broken Access Control vulnerability (CVSS 6.5, digitalpoint App for Cloudflare®)
- [CVE-2026-39748](https://cve.now/CVE-2026-39748.md): WordPress EduMall theme \<= 4.5.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, ThemeMove EduMall)
- [CVE-2026-39747](https://cve.now/CVE-2026-39747.md): WordPress Woffice theme \<= 5.4.35 - SQL Injection vulnerability (CVSS 8.5, WofficeIO Woffice)
- [CVE-2026-39746](https://cve.now/CVE-2026-39746.md): WordPress Booknetic plugin \< 5.10.3 - SQL Injection vulnerability (CVSS 9.3, Booknetic)
- [CVE-2026-39745](https://cve.now/CVE-2026-39745.md): WordPress Contact Form to DB by BestWebSoft plugin \<= 1.7.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, bestweblayout Contact Form to DB by BestWebSoft)
- [CVE-2026-39731](https://cve.now/CVE-2026-39731.md): WordPress Database for CF7 plugin \<= 1.2.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, code4life Database for CF7)
- [CVE-2026-39730](https://cve.now/CVE-2026-39730.md): WordPress Wise Chat plugin \<= 3.4.3 - Broken Access Control vulnerability (CVSS 7.1, Marcin Wise Chat)
- [CVE-2026-39729](https://cve.now/CVE-2026-39729.md): WordPress Edwiser Bridge plugin \<= 4.3.4 - Sensitive Data Exposure vulnerability (CVSS 7.2, WisdmLabs Edwiser Bridge)
- [CVE-2026-39728](https://cve.now/CVE-2026-39728.md): WordPress Instapage Plugin plugin \<= 3.7.2 - Server Side Request Forgery (SSRF) vulnerability (CVSS 7.2, instapagedev Instapage Plugin)
- [CVE-2026-39727](https://cve.now/CVE-2026-39727.md): WordPress WC Fields Factory plugin \<= 4.1.12 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Saravana Kumar K WC Fields Factory)
- [CVE-2026-39726](https://cve.now/CVE-2026-39726.md): WordPress Lumise Product Designer plugin \<= 2.1.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Lumise NEO Lumise Product Designer)
- [CVE-2026-39724](https://cve.now/CVE-2026-39724.md): WordPress HTTP Requests Manager plugin \<= 1.3.11 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, veppa HTTP Requests Manager)
- [CVE-2026-39722](https://cve.now/CVE-2026-39722.md): WordPress WPLMS theme \<= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, VibeThemes WPLMS)
- [CVE-2026-39720](https://cve.now/CVE-2026-39720.md): WordPress Mapster WP Maps plugin \<= 2.0.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Mapster WP Maps)
- [CVE-2026-39719](https://cve.now/CVE-2026-39719.md): WordPress PDF Smart Viewer for Elementor plugin \<= 1.0.4 - Server Side Request Forgery (SSRF) vulnerability (CVSS 7.2, DeKnows PDF Smart Viewer for Elementor)
- [CVE-2026-32581](https://cve.now/CVE-2026-32581.md): WordPress Mooberry Book Manager plugin 4.16.2 - SQL Injection vulnerability (CVSS 7.1, mooberrydreams Mooberry Book Manager)
- [CVE-2026-32580](https://cve.now/CVE-2026-32580.md): WordPress WooCommerce Lottery plugin \<= 2.2.9 - SQL Injection vulnerability (CVSS 7.5, wpgenie WooCommerce Lottery)
- [CVE-2026-32579](https://cve.now/CVE-2026-32579.md): WordPress Kognetiks Chatbot for WordPress plugin \<= 2.4.9 - Arbitrary File Upload vulnerability (CVSS 10.0, Kognetiks Chatbot for WordPress)
- [CVE-2026-32578](https://cve.now/CVE-2026-32578.md): WordPress ECPay Ecommerce for WooCommerce plugin \<= 1.1.2606090 - Broken Access Control vulnerability (CVSS 7.1, techsupport ECPay Ecommerce for WooCommerce)
- [CVE-2026-32577](https://cve.now/CVE-2026-32577.md): WordPress Frontend File Manager plugin \<= 23.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, N-Media Frontend File Manager)
- [CVE-2026-32575](https://cve.now/CVE-2026-32575.md): WordPress SUMO Affiliates Pro plugin \<= 11.7.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Fantastic Plugins SUMO Affiliates Pro)
- [CVE-2026-32574](https://cve.now/CVE-2026-32574.md): WordPress Smart Forms plugin \<= 2.6.104 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, EDGARROJAS Smart Forms)
- [CVE-2026-32572](https://cve.now/CVE-2026-32572.md): WordPress WP User Frontend Pro plugin \<= 4.2.13 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, weDevs WP User Frontend Pro)
- [CVE-2026-32571](https://cve.now/CVE-2026-32571.md): WordPress Ohio Extra plugin \<= 3.6.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Colabrio Ohio Extra)
- [CVE-2026-32570](https://cve.now/CVE-2026-32570.md): WordPress Progressify - Progressive Web App (PWA) plugin \<= 1.6.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, DaftPlug Progressify - Progressive Web App)
- [CVE-2026-32569](https://cve.now/CVE-2026-32569.md): WordPress WP Media folder plugin \<= 6.2.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Joomunited WP Media folder)
- [CVE-2026-32568](https://cve.now/CVE-2026-32568.md): WordPress WooCommerce Designer Pro plugin \<= 1.9.33 - Remote Code Execution (RCE) vulnerability (CVSS 9.9, JMAPlugins WooCommerce Designer Pro)
- [CVE-2026-32557](https://cve.now/CVE-2026-32557.md): WordPress WooCommerce Appointments plugin \<= 5.3.2 - SQL Injection vulnerability (CVSS 9.3, BookingWP WooCommerce Appointments)
- [CVE-2026-25434](https://cve.now/CVE-2026-25434.md): WordPress WP2LEADS plugin \<= 3.5.7 - SQL Injection vulnerability (CVSS 8.5, Tobias @Saleswonder.biz WP2LEADS)
- [CVE-2026-25433](https://cve.now/CVE-2026-25433.md): WordPress WP2LEADS plugin \<= 3.5.7 - Broken Access Control vulnerability (CVSS 7.1, Tobias @Saleswonder.biz WP2LEADS)
- [CVE-2026-4889](https://cve.now/CVE-2026-4889.md): SQL Injection (SQLi) in eLoanApp Platform by RDL Technologies (CVSS 7.8, RDL Technologies eLoanApp Platform)
- [CVE-2026-105809](https://cve.now/CVE-2026-105809.md): SourceCodester Simple Student Information System Profile Field register.php cross site scripting (CVSS 5.3, SourceCodester Simple Student Information System)
- [CVE-2026-105879](https://cve.now/CVE-2026-105879.md): WordPress JetElements For Elementor plugin \<= 2.9.2.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Crocoblock JetElements For Elementor)
- [CVE-2026-105808](https://cve.now/CVE-2026-105808.md): SourceCodester Simple Student Information System searchresults.php clean cross site scripting (CVSS 5.1, SourceCodester Simple Student Information System)
- [CVE-2026-103346](https://cve.now/CVE-2026-103346.md): WordPress Payflex Payment Gateway plugin \<= 2.7.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Tomlister Payflex Payment Gateway)
- [CVE-2026-105305](https://cve.now/CVE-2026-105305.md): Keycloak-services: keycloak-services: device authorization grant bypasses per-client minimum.acr.value enforcement (CVSS 5.4, Red Hat Build of Keycloak · Red Hat Single Sign-On)
- [CVE-2026-105807](https://cve.now/CVE-2026-105807.md): SourceCodester Simple Student Information System searchquery.php sql injection (CVSS 6.9, SourceCodester Simple Student Information System)
- [CVE-2026-85153](https://cve.now/CVE-2026-85153.md): Information Disclosure Vulnerability in Schmooze dating mobile Application (CVSS 9.3, Schmooze dating mobile Application)
- [CVE-2026-59357](https://cve.now/CVE-2026-59357.md): Self-UAA OIDC Configuration allows JWT injection to establish unauthorized sessions (CVSS 6.5, Cloud Foundry UAA · Cloud Foundry cf-deployment)
- [CVE-2026-59358](https://cve.now/CVE-2026-59358.md): UAA OAuth Token Endpoint Vulnerability allows user access token reuse for client\_credentials grant type (CVSS 7.6, Cloud Foundry UAA · Cloud Foundry cf-deployment)
- [CVE-2026-105778](https://cve.now/CVE-2026-105778.md): Tenda AC5 Wifi setWifi stack-based overflow (CVSS 9.4, Tenda AC5)
- [CVE-2026-105701](https://cve.now/CVE-2026-105701.md): ACPT (Premium) \<= 2.0.66 - Authenticated (Subscriber+) Remote Code Execution via REST API Email Template (CVSS 8.8, Mauro Cassani ACPT)
- [CVE-2026-94293](https://cve.now/CVE-2026-94293.md): Missing authentication for critical function in the aas-edge-client REST API (CVSS 9.3, Murrelektronik Software AAS Edge Client all versions)
- [CVE-2026-57559](https://cve.now/CVE-2026-57559.md): Use After Free in DSP\_Services (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2026-57555](https://cve.now/CVE-2026-57555.md): Use After Free in DSP Service (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2026-57554](https://cve.now/CVE-2026-57554.md): Use After Free in DSP Service (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2026-57546](https://cve.now/CVE-2026-57546.md): Buffer Over-read in WLAN HAL (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2026-57545](https://cve.now/CVE-2026-57545.md): Untrusted Pointer Dereference in Graphics (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2026-57537](https://cve.now/CVE-2026-57537.md): Use After Free in DSP Service (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2026-25302](https://cve.now/CVE-2026-25302.md): Improper Verification of Cryptographic Signature in Boot (CVSS 7.1, Qualcomm Snapdragon)
- [CVE-2026-25291](https://cve.now/CVE-2026-25291.md): Use After Free in Graphics (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2026-25274](https://cve.now/CVE-2026-25274.md): Use After Free in Windows WLAN Host (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2026-25273](https://cve.now/CVE-2026-25273.md): Out-of-bounds Write in Camera Driver (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2026-25272](https://cve.now/CVE-2026-25272.md): Out-of-bounds Write in Camera Driver (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2026-25270](https://cve.now/CVE-2026-25270.md): Out-of-bounds Write in Camera Driver (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2026-25269](https://cve.now/CVE-2026-25269.md): Out-of-bounds Write in Camera Driver (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2026-25267](https://cve.now/CVE-2026-25267.md): Missing Authorization in Core (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2026-25263](https://cve.now/CVE-2026-25263.md): Out of Bounds write in Linux Camera (CVSS 6.6, Qualcomm Snapdragon)
- [CVE-2026-86786](https://cve.now/CVE-2026-86786.md): Slider Pro \<= 1.0.0 - Unauthenticated Sensitive Data Disclosure via sliderpro\_multiple\_images (CVSS 5.3, Slider Pro)
- [CVE-2026-94278](https://cve.now/CVE-2026-94278.md): File Media Renamer \<= 1.3 - Author+ Arbitrary File Rename via save-attachment-compat (CVSS 5.5, File Media Renamer)
- [CVE-2026-89289](https://cve.now/CVE-2026-89289.md): Fast Courier \<= 5.2.3 - Unauthenticated Order Fulfillment Update via order-status-update REST Endpoint (CVSS 5.3, Fast Courier)
- [CVE-2026-94299](https://cve.now/CVE-2026-94299.md): elegro Crypto Payment \<= 1.0.1 - Unauthenticated Arbitrary Order Status Change via IPN Callback (CVSS 6.5, elegro Crypto Payment)
- [CVE-2026-94271](https://cve.now/CVE-2026-94271.md): Deema Payment Gateway \<= 1.1.2 - Unauthenticated Payment Confirmation Forgery via Unverified Success Return (CVSS 5.3, Deema Payment Gateway)
- [CVE-2026-94270](https://cve.now/CVE-2026-94270.md): Deema Payment Gateway \<= 1.1.2 - Unauthenticated Payment Bypass and Order Manipulation via Webhook (CVSS 5.3, Deema Payment Gateway)
- [CVE-2026-105776](https://cve.now/CVE-2026-105776.md): bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL admin\_transaction.php sql injection (CVSS 6.9, bhagya3929 Employee-Movement-Tracking-and-Monitoring-Websit…)
- [CVE-2026-105775](https://cve.now/CVE-2026-105775.md): vllm-project vLLM Completions Request mamba\_mixer2.py conv\_ssm\_forward out-of-bounds (CVSS 5.3, vllm-project vLLM)
- [CVE-2026-75962](https://cve.now/CVE-2026-75962.md): Post SMTP \<= 4.0.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user\_email' Parameter (Multisite Registration → Failed Email Log) (CVSS 7.2, saadiqbal Post SMTP – Complete Email Delivery and SMTP Solu…)
- [CVE-2026-105708](https://cve.now/CVE-2026-105708.md): imgproxy SVG svg.go sanitizeElement cross site scripting (CVSS 5.3, imgproxy)
- [CVE-2026-97300](https://cve.now/CVE-2026-97300.md): WordPress WP Event Solution plugin \<= 4.1.25 - Broken Access Control vulnerability (CVSS 6.5, Arraytics WP Event Solution)
- [CVE-2026-41563](https://cve.now/CVE-2026-41563.md): WordPress Sitemovr plugin \<= 1.0.1 - Sensitive Data Exposure vulnerability (CVSS 7.5, Dawer Drew Sitemovr)
- [CVE-2026-41558](https://cve.now/CVE-2026-41558.md): WordPress WP Migration Plugin DB & Files – WP Synchro plugin \<= 1.16.1 - 2FA Bypass vulnerability (CVSS 7.5, WP Migration Plugin DB & Files – WP Synchro)
- [CVE-2026-39789](https://cve.now/CVE-2026-39789.md): WordPress Fluent Affiliate Pro plugin \<= 1.6.4 - Broken Access Control vulnerability (CVSS 7.5, WP Manage Ninja Fluent Affiliate Pro)
- [CVE-2026-39760](https://cve.now/CVE-2026-39760.md): WordPress Real 3D FlipBook plugin \<= 5.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Creative interactive media Real 3D FlipBook)
- [CVE-2026-39723](https://cve.now/CVE-2026-39723.md): WordPress Morning for WooCommerce plugin \<= 2.4.1 - Broken Access Control vulnerability (CVSS 7.5, Green Invoice Morning for WooCommerce)
- [CVE-2026-39599](https://cve.now/CVE-2026-39599.md): WordPress WDS MCP Content Manager plugin \<= 3.10.4 - Broken Access Control vulnerability (CVSS 4.3, wallstrdev WDS MCP Content Manager)
- [CVE-2026-32582](https://cve.now/CVE-2026-32582.md): WordPress IATO MCP plugin \<= 1.12.0 - Broken Access Control vulnerability (CVSS 6.5, iatoai IATO MCP)
- [CVE-2026-32576](https://cve.now/CVE-2026-32576.md): WordPress Faktur Pro for WooCommerce plugin \<= 3.2.2 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5, ZWEISCHNEIDER Faktur Pro for WooCommerce)
- [CVE-2026-105072](https://cve.now/CVE-2026-105072.md): WordPress FluentBooking Pro plugin \< 2.5.0 - Broken Access Control vulnerability (CVSS 7.5, WP Manage Ninja FluentBooking Pro)
- [CVE-2026-105707](https://cve.now/CVE-2026-105707.md): uptrace user\_handler.go Login information exposure (CVSS 6.9, uptrace)
- [CVE-2026-105706](https://cve.now/CVE-2026-105706.md): SourceCodester Drug Recommendation System cross-site request forgery (CVSS 5.3, SourceCodester Drug Recommendation System)
- [CVE-2026-105705](https://cve.now/CVE-2026-105705.md): SourceCodester Drug Recommendation System add\_drug.php cross site scripting (CVSS 5.3, SourceCodester Drug Recommendation System)
- [CVE-2026-105704](https://cve.now/CVE-2026-105704.md): SourceCodester Drug Recommendation System Auth Guard improper authentication (CVSS 6.9, SourceCodester Drug Recommendation System)
- [CVE-2026-105703](https://cve.now/CVE-2026-105703.md): PHPGurukul User Registration & Login and User Management System Change Password change-password.php authorization (CVSS 5.1, PHPGurukul User Registration & Login and User Management Sy…)
- [CVE-2026-105621](https://cve.now/CVE-2026-105621.md): jishenghua jshERP Financial Receipt Update AccountHeadService.java updateAccountHeadAndDetail improper authorization (CVSS 5.3, jishenghua jshERP)
- [CVE-2026-105611](https://cve.now/CVE-2026-105611.md): chillzhuang SpringBlade User Detail Endpoint RoleController.java improper authorization (CVSS 5.1, chillzhuang SpringBlade)
- [CVE-2026-105610](https://cve.now/CVE-2026-105610.md): chillzhuang SpringBlade Parameter Submit Management ParamController.java improper authorization (CVSS 5.1, chillzhuang SpringBlade)
- [CVE-2026-105573](https://cve.now/CVE-2026-105573.md): newbee-ltd newbee-mall Shopping Cart Quantity updateAccountHeadAndDetail logic error (CVSS 5.3, newbee-ltd newbee-mall)
- [CVE-2026-105572](https://cve.now/CVE-2026-105572.md): PickMall Lilishop Buyer Invoice List receipt authorization (CVSS 5.3, PickMall Lilishop)
- [CVE-2026-105571](https://cve.now/CVE-2026-105571.md): PickMall Lilishop Mobile Binding bindMobile improper authorization (CVSS 6.9, PickMall Lilishop)
- [CVE-2026-105487](https://cve.now/CVE-2026-105487.md): yogeshojha reNgine listTargets Endpoint tasks.py subdomain\_discovery os command injection (CVSS 5.3, yogeshojha reNgine)
- [CVE-2026-105486](https://cve.now/CVE-2026-105486.md): OSSRS srs System API api.go systemAPI.Run missing authentication (CVSS 6.9, OSSRS srs)
- [CVE-2026-104380](https://cve.now/CVE-2026-104380.md): Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in ps\_serve\_one (CVSS 5.3, Punk)
- [CVE-2026-104044](https://cve.now/CVE-2026-104044.md): Sssd: sssd: denial of service via crafted passkey kerberos authentication request (CVSS 6.2, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-104043](https://cve.now/CVE-2026-104043.md): Sssd: sssd: denial of service via undersized packet parsing in nss responder (CVSS 5.5, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-104042](https://cve.now/CVE-2026-104042.md): Sssd: sssd: denial of service via out-of-bounds read in pam responder (CVSS 5.5, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-104041](https://cve.now/CVE-2026-104041.md): Sssd: sssd: denial of service via unbounded negative cache growth (CVSS 5.5, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-104040](https://cve.now/CVE-2026-104040.md): Sssd: sssd: information disclosure via odata injection in entra id lookups (CVSS 4.4, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-104039](https://cve.now/CVE-2026-104039.md): Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder (CVSS 4.7, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-105484](https://cve.now/CVE-2026-105484.md): TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware\_check os command injection (CVSS 10.0, TOTOLINK X6000R)
- [CVE-2026-105472](https://cve.now/CVE-2026-105472.md): girishsaraf Online-Appointment-Booking-System Booking book.php sql injection (CVSS 5.3, girishsaraf Online-Appointment-Booking-System)
- [CVE-2026-104038](https://cve.now/CVE-2026-104038.md): Sssd: sssd: denial of service via missing sid extension in certificate mapping (CVSS 5.9, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-104037](https://cve.now/CVE-2026-104037.md): Sssd: sssd: denial of service via packet length underflow in autofs responder (CVSS 5.5, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-92821](https://cve.now/CVE-2026-92821.md): Sssd: sssd: access control bypass via premature ldap access rule evaluation (CVSS 6.8, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-104036](https://cve.now/CVE-2026-104036.md): Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin (CVSS 5.8, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-104035](https://cve.now/CVE-2026-104035.md): Sssd: sssd: denial of service via memory exhaustion in kcm responder (CVSS 5.5, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-104034](https://cve.now/CVE-2026-104034.md): Sssd: sssd: denial of service via use-after-free in kcm ticket renewal (CVSS 4.7, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-104033](https://cve.now/CVE-2026-104033.md): Sssd: sssd: access control bypass via improper ldap shadow expiration check (CVSS 5.4, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-104032](https://cve.now/CVE-2026-104032.md): Sssd: sssd: denial of service via unprivileged autofs cache invalidation (CVSS 5.5, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-104031](https://cve.now/CVE-2026-104031.md): Sssd: sssd: denial of service via memory exhaustion in autofs responder (CVSS 5.5, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2025-45871](https://cve.now/CVE-2025-45871.md): LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated (CVSS 8.1)
- [CVE-2025-71383](https://cve.now/CVE-2025-71383.md): Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the local Wi-Fi network) that lacks a /api/lo (CVSS 9.8)
- [CVE-2025-71384](https://cve.now/CVE-2025-71384.md): Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS commands by leveraging a stack-based buffer (CVSS 6.7)
- [CVE-2026-77178](https://cve.now/CVE-2026-77178.md): Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp (CVSS 9.1)
- [CVE-2026-95140](https://cve.now/CVE-2026-95140.md): kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java. (CVSS 7.5)
- [CVE-2026-95153](https://cve.now/CVE-2026-95153.md): An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive information via the /admin/ajax/clippy and /admin/ajax/save-as-dr (CVSS 4.9)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-10-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.