CVE-2026-18677: Authentication Bypass by Spoofing

In Kong Mesh running in universal mode with a MeshIdentity whose SPIFFE ID path template derives from the dataplane's kuma.io/workload label, the XDS authenticator in kuma-cp validates that label only when the dataplane token is bound to a workload. Workload binding is optional, so a dataplane...

PT-2026-71207

The default kuma-cp configuration in Kong Mesh reveals the admin bootstrap token and signing keys to any webpage the operator visits while the control plane is reachable from their browser. Due to a CORS misconfiguration a cross-origin fetch from a malicious page returns the admin JWT and signing...

CVE-2026-18676: Origin Validation Error

The default kuma-cp configuration in Kong Mesh reveals the admin bootstrap token and signing keys to any webpage the operator visits while the control plane is reachable from their browser. Due to a CORS misconfiguration a cross-origin fetch from a malicious page returns the admin JWT and signing...

CVE-2026-19174

creationtimestamp| type| source ---|---|--- 2026-08-07 04:48:36+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:47:40+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999 2026-09-06 06:01:47+00:00| seen|...

CVE-2026-19171

creationtimestamp| type| source ---|---|--- 2026-08-07 04:48:30+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:47:33+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999...

CVE-2026-19169

creationtimestamp| type| source ---|---|--- 2026-08-07 04:47:55+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:47:29+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999...

CVE-2026-19168

creationtimestamp| type| source ---|---|--- 2026-08-07 04:47:52+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:47:27+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999...

CVE-2026-19165

creationtimestamp| type| source ---|---|--- 2026-08-07 04:47:15+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-07 17:12:24+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117055340138145623 2026-08-13 09:47:20+00:00| seen|...

CVE-2026-19164

creationtimestamp| type| source ---|---|--- 2026-08-07 04:47:12+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-07 14:38:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msirtxq2cn2r 2026-08-09 06:16:14+00:00| seen|...

CVE-2026-19160

creationtimestamp| type| source ---|---|--- 2026-08-07 04:46:33+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:47:08+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999...

CVE-2026-19157

creationtimestamp| type| source ---|---|--- 2026-08-07 04:46:26+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-07 14:38:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msirtwdgl727 2026-08-13 09:47:01+00:00| seen|...

CVE-2026-19156

creationtimestamp| type| source ---|---|--- 2026-08-07 04:46:23+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:46:59+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999...

CVE-2026-19155

creationtimestamp| type| source ---|---|--- 2026-08-07 04:46:21+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:46:56+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999 2026-08-13 09:52:59+00:00| seen|...

CVE-2026-19151

creationtimestamp| type| source ---|---|--- 2026-08-07 04:46:12+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:46:49+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999...

CVE-2026-19150

creationtimestamp| type| source ---|---|--- 2026-08-07 04:46:10+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:46:47+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999...

CVE-2026-19148

creationtimestamp| type| source ---|---|--- 2026-08-07 04:46:04+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:46:43+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999...

CVE-2026-19146

creationtimestamp| type| source ---|---|--- 2026-08-07 04:46:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:46:38+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999...

CVE-2026-19144

creationtimestamp| type| source ---|---|--- 2026-08-07 04:45:55+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:46:33+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999 2026-08-13 09:52:55+00:00| seen|...

CVE-2026-19140

creationtimestamp| type| source ---|---|--- 2026-08-07 04:45:46+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:46:29+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999 2026-08-13 09:52:50+00:00| seen|...

CVE-2026-19139

creationtimestamp| type| source ---|---|--- 2026-08-07 04:45:44+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:46:25+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999...