PT-2026-107080

Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-106873

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in the FileSystem component allows a remote attacker who has compromised the renderer process to bypass the web origin policy, which is a security mechanism that...

PT-2026-106970

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Scheduling component allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loade...

PT-2026-106994

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An open redirect exists in the AppManifest, which allows a remote attacker to bypass the web origin policy—a security mechanism that restricts how a document or script loaded from one...

PT-2026-107177

Gitea validated the initial remote URL for push mirrors, wiki remote checks, and fetches of migrated pull request heads, but the subsequent raw Git operations followed HTTP redirects without revalidating the destination. A repository administrator using a policy-allowed endpoint that redirects...

PT-2026-107210

A denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an authenticated local attacker to interrupt the normal operation of the agent service...

CVE-2026-106216: Cross-Site Request Forgery (CSRF)

Cross-site request forgery in ReadingList in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107198

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary...

PT-2026-107197

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitra...

PT-2026-107191

Name of the Vulnerable Software and Affected Versions HPE Networking ClearPass Policy Manager affected versions not specified Description Authentication bypass flaws exist in the web-based management and API interfaces. These issues allow an unauthenticated remote attacker to circumvent...

PT-2026-107194

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager affected versions not specified Description A SQL injection flaw exists in the web-based management interface of ClearPass Policy Manager. This issue allows an authenticated remote attacker to execute arbitrary databas...

CVE-2026-106408: Protection Mechanism Failure

Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106405: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass web origin policy via a co-installed app. Chromium security severity: Medium...

PT-2026-107205

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager Windows client software affected versions not specified Description A missing integrity verification issue exists in the Windows client software. This flaw allows local users to elevate their privileges, potentially...

PT-2026-107208

Name of the Vulnerable Software and Affected Versions HPE Networking ClearPass Policy Manager affected versions not specified Description Remote code execution flaws exist in the affected interface, allowing an authenticated remote attacker with high privileges to execute arbitrary code. This cou...

PT-2026-107209

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager affected versions not specified Description A SQL injection flaw exists in the API of ClearPass Policy Manager. This issue allows a remote authenticated attacker with administrative privileges to perform SQL injection...

PT-2026-107195

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager affected versions not specified Description An issue exists in the affected interface of ClearPass Policy Manager that may allow an unauthenticated remote attacker to bypass authentication controls. This could lead to...

PT-2026-107200

Name of the Vulnerable Software and Affected Versions HPE Networking ClearPass Policy Manager affected versions not specified Description A missing integrity verification issue in the client agent software allows an unauthenticated remote attacker to introduce untrusted code. This could lead to t...

PT-2026-107196

Name of the Vulnerable Software and Affected Versions HPE Networking ClearPass Policy Manager Android client application affected versions not specified Description An improper access control issue allows application functionality to be invoked by untrusted sources. This could enable an...

PT-2026-107204

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager OnGuard Linux agent affected versions not specified Description A privilege escalation issue in the ClearPass Policy Manager OnGuard Linux agent allows a malicious user on a Linux instance to elevate their privileges t...