CVE-2026-14681

A flaw was found in PostgreSQL. Improper enforcement of message integrity in PostgreSQL's GSSAPI Generic Security Service Application Program Interface support allows a user to negotiate GSSAPI contrary to pghba.conf rules by initiating a direct TLS Transport Layer Security connection. This enabl...

The vulnerability of the Network component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data and compromise its integrity.

The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data and compromise its integrity through a specially crafted HTML page...

The vulnerability of the CSS component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data and compromise its integrity.

The vulnerability of the CSS component in Google Chrome and Microsoft Edge relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data and compromise its integrity.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a...

The vulnerability of the CSS component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data and compromise its integrity.

The vulnerability of the CSS component in Google Chrome and Microsoft Edge relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data and compromise its integrity.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the lack of protective measures for the web page structure. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially...

The vulnerability of the Speech component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data and compromise its integrity.

The vulnerability of the Speech component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially created HTML page...

The vulnerability of the Network component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data and compromise its integrity.

The vulnerability of the Network component in Google Chrome and Microsoft Edge relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a speciall...

The vulnerability of the CSS component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data and compromise its integrity.

The vulnerability of the CSS component in Google Chrome and Microsoft Edge relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially...

The vulnerability of XML components in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data and compromise its integrity.

The vulnerability of XML components in Google Chrome and Microsoft Edge browsers is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a...

CVE-2026-73779: Improper Privilege Management

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information...

ROS-20260831-73-0011

The vulnerability of the HttpObjectDecoder component in the framework for developing network applications, servers, and Netty protocol clients is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected...

The vulnerability of the OpenSSH cryptographic protection mechanism, which arises from performing operations in the wrong order, allows attackers to gain access to confidential data and compromise the integrity of that data.

The vulnerability of the OpenSSH cryptographic protection lies in the improper execution of certain operations. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise the integrity of those data...

The vulnerability of the DNS LDNS library, related to the lack of a mechanism for verifying the source of data, allows attackers to compromise the integrity of the data.

The vulnerability of the DNS LDNS library is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

CVE-2026-59641

A flaw was found in Bouncy Castle for Java. The S/MIME Secure/Multipurpose Internet Mail Extensions validator improperly trusts the signing time asserted by the signer during path validation. This could allow an attacker to bypass certificate path validation, potentially leading to the acceptance...

The vulnerability in the implementation of the Bluetooth protocol in Linux operating systems allows a perpetrator to compromise the integrity of protected information.

The vulnerability of the Linux operating system’s Bluetooth kernel implementation is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

JetBrains TeamCity < 2021.2.2 XSS (CVE-2022-25261)

The version of JetBrains TeamCity installed on the remote host is prior to 2021.2.2. It is, therefore, affected by a vulnerability: - JetBrains TeamCity before 2021.2.2 was vulnerable to reflected XSS. CVE-2022-25261 Note that Nessus has not tested for this issue but has instead relied only on th...

The vulnerability of the scsi_queue_rq() function in the drivers/scsi/scsi_lib.c module of the Linux operating system’s SCSI device driver allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the scsiqueuerq function in the drivers/scsi/scsilib.c module of the Linux SCSI device driver involves synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information or cause service...

CVE-2026-58439

A flaw was found in Gitea. This vulnerability allows an attacker to bypass branch protection by retargeting a Pull Request PR that has a stale 'official' approval flag. This could lead to unauthorized code being merged into a protected branch, compromising code integrity. Mitigation Mitigation fo...

EUVD-2026-63118

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the dispatch archive for an embedded report search job and use exposed session material to access all relevant data and affect system integrity on the...