PT-2026-88660

Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-87513

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access...

CVE-2026-71807

RuoYi-Cloud-Plus versions up to 2.6.2 are affected in the ruoyi-workflow module. The root cause is that multiple core task APIs in FlwTaskController lack permission annotations, and the Service layer does not verify whether the current user is the task handler or related user. Authenticated low-p...

PT-2026-88575

Missing authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

Security Advisory 0179

Security Advisory 0179 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-86106 CVSSv3.1 Base Score: 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSSv4.0 Base Score: 8.7...

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21799-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21799-1 advisory. Changes in chromium: - Chromium 152.0.7977.82 boo1278683: CVE-2026-85046: Type confusion in V8 CVE-2026-85052: Out of bounds read in...

The vulnerability of the compatibility package for Microsoft Azure Entra ID, related to the absence of authentication, allows a perpetrator to escalate their privileges.

The vulnerability of the compatibility package for Microsoft Azure Entra ID is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the mxuport_calc_num_ports() function in the drivers/usb/serial/mxuport.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mxuportcalcnumports function in the drivers/usb/serial/mxuport.c module of the Linux device driver framework is related to the copying of buffers without checking input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

CVE-2026-79324

A missing authorization flaw in the Address Delete controller of the Mageplaza GDPR extension for Magento 2 (mageplaza/module-gdpr) through version 4.2.9 allows a remote, unauthenticated attacker to delete any customer's saved address via a simple GET request to /customer/address/delete/id/{id}. ...

Linux Distros Unpatched Vulnerability : CVE-2026-87603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML...

Kibana 8.x < 8.19.21 / 9.0.3 < 9.4.6 Missing Authorization (ESA-2026-155)

The version of Kibana installed on the remote host is 8.x prior to 8.19.21, or 9.0.3 prior to 9.4.6. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-155 advisory. - Missing Authorization CWE-862 in the Kibana Entity Store feature can lead to unauthorized credential...

Linux Distros Unpatched Vulnerability : CVE-2026-87534

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system...

Linux Distros Unpatched Vulnerability : CVE-2026-87431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome...

Linux Distros Unpatched Vulnerability : CVE-2026-87560

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-87622

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium...

PT-2026-88529

Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

Linux Distros Unpatched Vulnerability : CVE-2026-87556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-87475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access...

Linux Distros Unpatched Vulnerability : CVE-2026-87429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass syst...

Kibana 9.0.x < 9.4.6 / 9.5.x < 9.5.1 Missing Authorization (ESA-2026-149)

The version of Kibana installed on the remote host is 9.0.x prior to 9.4.6, or 9.5.x prior to 9.5.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-149 advisory. - Missing Authorization CWE-862 in Kibana can lead to information disclosure via Exploiting Incorrectly...