CVE-2026-18872

IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to stored cross-site scripting CWE-79 in the FTM UI NetworkAcknowledgement React component NetworkAcknowledgement.jsx:42. A malicious actor can inject script into stored network acknowledgement data that executes in...

PT-2026-105058

RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The runtime-parameters lookup path coerces the URL :component segment to an atom with rabbit data coercion:to atom/1 in lookup component/1 deps/rabbit/src/rabbit runtime parameters.erl, creating a new atom for any...

Google Chrome Microsoft Edge DoS

The vulnerability in the Certificate component of Google Chrome and Microsoft Edge is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Media Component DoS

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-92032

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird...

Google Chrome Microsoft Edge Code Execution

The Input component vulnerability in Google Chrome and Microsoft Edge web browsers is related to use-after-free memory usage. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

Network component Code Execution

The Network component vulnerability in Google Chrome and Microsoft Edge is related to use-after-free memory usage. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

Google Chrome Microsoft Edge DoS

The vulnerability in the Navigation component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2026-92026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-92021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16. CVE-2026-92021 Note that Ness...

Linux Distros Unpatched Vulnerability : CVE-2026-92018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3,...

CVE-2026-18872: Improper Neutralization of Input During Web Page Generation

IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to stored cross-site scripting CWE-79 in the FTM UI NetworkAcknowledgement React component NetworkAcknowledgement.jsx:42. A malicious actor can inject script into stored network acknowledgement data that executes in...

Linux Distros Unpatched Vulnerability : CVE-2026-92024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156,...

Linux Distros Unpatched Vulnerability : CVE-2026-92029

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156,...

Linux Distros Unpatched Vulnerability : CVE-2026-92028

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3,...

Linux Distros Unpatched Vulnerability : CVE-2026-92030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3,...

Linux Distros Unpatched Vulnerability : CVE-2026-92023

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156,...

Linux Distros Unpatched Vulnerability : CVE-2026-92025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3,...

homeassistant-stubs (2022.3.0b4), pytest-homeassistant-custom-component (0.6.19) potentially affected by CVE-2026-91130 via homeassistant (2022.3.0b4)

homeassistant PYPI version 2022.3.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.0b4 - pytest-homeassistant-custom-component 0.6.19 Source cves: CVE-2026-91130 Source advisory:...

homeassistant-stubs (2022.3.0b6), pytest-homeassistant-custom-component (0.6.21) potentially affected by CVE-2026-91130 via homeassistant (2022.3.0b6)

homeassistant PYPI version 2022.3.0b6 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.0b6 - pytest-homeassistant-custom-component 0.6.21 Source cves: CVE-2026-91130 Source advisory:...