CVE-2026-90616

In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to arbitrary code execution on the host, a different vulnerability than CVE-2026-76925. Flatpak creates a few app data directories e.g., /var/cache, /var/dat...

COPG v6.9.8

🎮 COPG — Advanced Android Customization & Spoofing A powerful platform for device & app spoofing, system-level control, and advanced ROM capabilities. 🌐 Official website — download COPG free & buy COPG PRO: vendors.copg.my 🌐 Languages / 语言：English · 简体中文 ✨ Why COPG? COPG is a Zygisk modul...

CVE-2026-78547

Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...

CVE-2026-78546 Out-of-Bounds Read

Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...

EUVD-2026-76445

Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...

CVE-2026-78547

CVE-2026-78547 is an Out-of-Bounds Write (CWE-787) in Citrix Workspace app for Windows , disclosed by Citrix on 2026-09-08. Exploitation requires physical access to the target system and low privileges, with high attack complexity. The vulnerability can lead to high impact on integrity and availa...

CVE-2026-78547 Out-of-Bounds Write

Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...

@nitro/app (>=12.0.0-beta.1, <=12.0.0) potentially affected by CVE-2026-87123 via hbs (4.3.0)

hbs NPM version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on hbs and may be impacted: - @nitro/app =12.0.0-beta.1, =12.0.0 Source cves: CVE-2026-87123 Source advisory: SNYK:JS-HBS-19784397...

ROOT-APP-NPM-CVE-2026-67213 CVE-2026-67213 in nanoid - Patched by Root

Root has patched CVE-2026-67213 in the nanoid package for Root:npm. Multiple fixed versions available...

CVE-2026-19486

A Server-Side Request Forgery SSRF vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on...

CVE-2026-19486

CVE-2026-19486 is a Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder (versions prior to 2026-06-01 on Google Cloud Platform). An unauthenticated attacker can exploit it to leak the Compute Engine default service account access token , r...

CVE-2026-19486 SSRF in Gemini Enterprise Agent Platform App Builder

A Server-Side Request Forgery SSRF vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on...

CVE-2026-19486 SSRF in Gemini Enterprise Agent Platform App Builder

A Server-Side Request Forgery SSRF vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on...

EUVD-2026-76021

A Server-Side Request Forgery SSRF vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on...

appsandbox v0.1.5

App Sandbox App Sandbox is a virtual machine app for Windows and macOS that's focused on performance and ease of use. Windows features: Works on Windows 11 Home or Pro, without Hyper-V Windows 11 or Ubuntu 26.04 LTS VM Support Zero touch install Copy and Paste 2 Channel Audio GPU Acceleration via...

EUVD-2026-75803

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated attacker to bypass security restrictions due to incorrect authorization...

CVE-2026-19486: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on...

PT-2026-89808

A Server-Side Request Forgery SSRF vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on...

CVE-2026-78547: Out-of-bounds Write

Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...

CVE-2026-78546: Out-of-bounds Read

Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...