CVE-2026-76017

Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...

DEBIAN-CVE-2026-76017

Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...

EUVD-2026-63594

Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...

CVE-2026-76017

Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...

EUVD-2026-63166

X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

PT-2026-79125

Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...

CVE-2026-16857

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to manipulate network traffic and DNS configuration due to improper authentication...

EUVD-2026-62749

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to manipulate network traffic and DNS configuration due to improper authentication...

CVE-2026-16857

IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 are vulnerable to remote unauthenticated attacks that allow manipulation of network traffic and DNS configuration. CVSS 8.2 (HIGH) reflects no privileges or user interaction required; IBM support page https://www.ibm.com/support/pages/node/7283858 is the prim...

CVE-2026-72390

A flaw was found in the Linux kernel's schteql module. The teql master-slaves linked list, which manages network traffic queues, is not adequately protected against simultaneous modifications. This lack of protection can lead to a race condition, allowing a local attacker to trigger a...

CVE-2026-44621

A flaw was found in libunbound, a library used by applications for DNS resolution. A remote attacker could exploit this vulnerability by sending specially crafted network traffic. This could cause applications using libunbound to terminate unexpectedly, leading to a denial of service DoS. This...

PT-2026-78865

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A NULL pointer dereference in the X.509IF protocol dissector can lead to a crash, resulting in a denial of service. Recommendations Update Wireshark...

CVE-2026-66781

A flaw was found in the Submariner operator. The Submariner Custom Resource CR, used for configuring network connectivity, stores the IPsec pre-shared key PSK in an unencrypted format. This key, which is critical for securing communication between Kubernetes clusters, can be accessed by...

CVE-2026-65329

CVE-2026-65329 affects the Telephony framework on iOS 26.6.1/iPadOS 26.6.1 (iPhone 11+), where an authentication issue in IPSec state management allowed a privileged-network-position attacker to bypass IPSec authentication and intercept network traffic; fixed via improved state management. No exp...

CVE-2026-65329

An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1. An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic...

CVE-2026-74802

SiYuan versions before 3.7.4 contain a cross-site WebSocket hijacking vulnerability in the admin-only /ws/network/proxy endpoint that explicitly disables origin validation by setting CheckOrigin to unconditionally return true. Attackers can craft malicious webpages that establish WebSocket...

CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability

Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle MitM access to intercept and modify application communications. VPN tunnel traffic is not impacted. The GlobalProtect app on iOS, Android, and Chrome ...

CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability

Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle MitM access to intercept and modify application communications. VPN tunnel traffic is not impacted. The GlobalProtect app on iOS, Android, and Chrome ...

CVE-2026-11739 Command injection vulnerability in some NETGEAR Nighthawk devices

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic attacker in the middle to compromise the confidentiality and integrity of the affected device...

CVE-2026-20028

A vulnerability in the network driver of Cisco Terminal Service TS Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with the account of the attacker. This vulnerability is due to an incorrect mapping of network connections to user accounts. An...