CVE-2026-18261

Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions:...

CVE-2026-18260

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4...

CVE-2026-16646

Vulnerability in Drupal PanKM. This issue affects PanKM versions:...

CVE-2026-16641

Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions:...

CVE-2026-16642

Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions:...

CVE-2026-15088

Vulnerability in Drupal Development Environment. This issue affects Development Environment versions:...

CGA-7R46-5XW5-56Q2

Bulletin has no description...

CGA-JR52-7XPJ-F5H2

Bulletin has no description...

CGA-Q4GC-J2PW-FQ7J

Bulletin has no description...

CGA-MQVX-HCGH-47VX

Bulletin has no description...

CGA-RVH8-WRH5-FV2F

Bulletin has no description...

CVE-2026-16641

CVE-2026-16641 affects the Drupal Commerce Elavon contrib module, with all versions (. ) impacted. The project has been marked unsupported by the Drupal security team, and the known security issue remains unaddressed by the maintainer . No specific root cause or fixed version is provided in the a...

CVE-2026-15088

Drupal Development Environment (a Drupal contrib module) is affected by a Critical -severity security issue across all versions (. ). The Drupal security team has marked the project as unsupported , meaning the maintainer has not provided a fix and no patched version is currently available. The C...

UBUNTU-CVE-2026-80182

In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application credential, or trust-scoped authentication could create new long-lived credentials or authorize new delegations that persist independently of, and outlive, the credential used to obtain them. The delegation...

UBUNTU-CVE-2026-65183

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 throug...

CVE-2026-79246

Information leak in DataTransfer in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79220

Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79260

Improper input validation in Cookies in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79106

Improper input validation in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79076

Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...