CVE-2026-105863: Authentication Bypass by Spoofing

Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, a custom field option that maps a field to a reserved authentication claim name can place unintended values in the authentication token issued at login. This issue is fixed in version...

CVE-2026-106299: Improper Input Validation

Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106271: Missing Authorization

Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-106259: Incorrect Authorization

Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

PT-2026-106292

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

The Model Plants the Trigger: Answer-Side Backdoor Attacks in Multi-Turn Large Language Models

Safety alignment in Large Language Models LLMs remains vulnerable to backdoor attacks. Existing LLM backdoors are almost all input-centric: activation depends on explicit trigger patterns in the user input, so modern guardrails are built to sanitize the input space. We challenge this assumption...

PT-2026-106543

In the Linux kernel, the following vulnerability has been resolved: selinux: recheck intermediate backing files on mprotect mprotect can be used to bypass the SELinux checks that mmap performs against the intermediate layers of a stacked filesystem. mmap checks every backing layer as the request...

PT-2026-106718

QloApps through 1.7.0 contains an authorization bypass vulnerability in AdminProductsController::ajaxProcessBulkUpdateRooms that allows hotel-restricted back-office employees to modify rooms of other hotels. Attackers can submit foreign room IDs in the id rooms parameter to change status, floor,...

PT-2026-106493

Unauthenticated Bypass Vulnerability in Login Lockdown = 2.17 versions...

PT-2026-106340

Name of the Vulnerable Software and Affected Versions File Media Renamer versions prior to 1.4 Description The File Media Renamer WordPress plugin fails to verify if the requesting user is authorized to modify a specific media attachment. This allows any user with file-upload privileges to rename...

PT-2026-106339

Name of the Vulnerable Software and Affected Versions Deema Payment Gateway versions prior to 1.1.3 Description The Deema Payment Gateway WordPress plugin fails to verify payments with the payment provider when processing the return from a hosted checkout. Additionally, the plugin does not valida...

PT-2026-106336

The Slider Pro WordPress plugin through 1.0.0 does not perform any capability or authorisation check on one of its AJAX actions, allowing unauthenticated users to retrieve the title, excerpt and permalink of non-public posts, including drafts, pending, scheduled, private and trashed posts, as wel...

PT-2026-106331

Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro = 1.16.1 versions...

PT-2026-106359

Insufficient verification of data authenticity CWE-345 in the external OIDC login callback in Cloud Foundry UAA v4.5.0 to v79.6.0 inclusive allows an authenticated UAA user to bypass the OAuth authorization-code exchange and establish an authenticated external-OIDC browser session, via submitting...

PT-2026-106352

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A cryptographic issue occurs when processing non-ELF Executable and Linkable Format partitions. This flaw allows authentication and signature checks to be...

PT-2026-106362

A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This component allows devices with limited input capabilities to obtain security tokens. The issue occurs because the flow fails to check the minimum authentication level required by ...

PT-2026-106383

Unauthenticated Bypass Vulnerability in Zero Spam = 5.7.11 versions...

PT-2026-106285

A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...

PT-2026-107377

Name of the Vulnerable Software and Affected Versions Coraza versions 3.0.0 through 3.8.0 Description Coraza contains a flaw where request arguments are silently discarded once the SecArgumentsLimit default 1000 is reached. Because the engine does not set an error flag or notify rules when this...

PT-2026-107168

Authorization Bypass Through User-Controlled Key CWE-639 in Elasticsearch can lead to Information Disclosure via a specially crafted cross-cluster search request that references an unauthorized shard identifier. Elasticsearch contains an authorization bypass weakness in its handling of...