PT-2026-107053

Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107077

Race condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass web origin policy via a co-installed app. Chromium security severity: Medium...

PT-2026-107094

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in an API allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one origin...

CVE-2026-106289: Missing Authorization

Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107068

Improper input validation in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

PT-2026-107215

Name of the Vulnerable Software and Affected Versions HPE Networking ClearPass Policy Manager affected versions not specified Description A sensitive information disclosure issue exists in the client software. An attacker with local access to the affected system could exploit this to obtain...

PT-2026-107203

🚨 CVE-2026-79805 CVSS 9.8 Critical A path traversal flaw in HPE ClearPass Policy Manager allows remote attackers to read and overwrite sensitive OS files, leading to system compromise. https://t.co/AuVFW8JRTI https://t.co/jsTxIa6pL3...

CVE-2026-106359: Unintended Proxy or Intermediary

Confused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

PT-2026-107189

Name of the Vulnerable Software and Affected Versions HPE Networking ClearPass Policy Manager versions prior to 6.14.1 Description Deserialization of untrusted data in the web interface allows an unauthenticated remote attacker to execute arbitrary code on the affected system. Deserialization is...

CVE-2026-106361: Incorrect Provision of Specified Functionality

Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106221: Unintended Proxy or Intermediary

Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

PT-2026-107003

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper input validation in Extensions allows a remote attacker to bypass the web origin policy—a security mechanism that restricts how a document or script loaded from one origin can...

HPESBNW05158 rev.1 - Multiple Vulnerabilities in HPE Networking ClearPass Policy Manager (CPPM)

Potential Security Impact: Local: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Enterprise Software - Please refer to Vulnerability Summary for information on impacted software verisions. - Any hardware running the affected software is...

PT-2026-107201

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager affected versions not specified Description A command injection flaw exists in the client software. This issue allows an attacker to execute arbitrary commands with elevated privileges on the host system by providing...

PT-2026-107213

A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote attacker to inject arbitrary commands. Successful exploitation could allow an attacker to execute commands with elevated privileges on the affected Windows endpoint...

PT-2026-107212

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager OnGuard agent affected versions not specified Description An arbitrary file write issue exists in the ClearPass Policy Manager OnGuard agent. This flaw allows local users to elevate their privileges and execute arbitra...

PT-2026-107199

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager affected versions not specified Description An authenticated path traversal vulnerability exists in the command line interface. This flaw allows a low-privileged authenticated remote attacker to execute arbitrary code...

PT-2026-107192

Name of the Vulnerable Software and Affected Versions HPE Networking ClearPass Policy Manager affected versions not specified Description A format string flaw in a service interface allows an unauthenticated remote attacker to corrupt process memory. This condition could lead to the execution of...

CVE-2026-105782

Scrapy is a high-level web crawling and scraping framework for Python. From 1.4.0 until 2.14.2, RefererMiddleware in scrapy/spidermiddlewares/referer.py treated a Referrer-Policy response-header value that resembled a Python import path as a referrer policy class, imported the referenced object,...

CVE-2026-105782

The Scrapy web crawling framework (versions 1.4.0 through 2.14.1) is vulnerable to arbitrary module import via the Referrer-Policy response header. The RefererMiddleware in scrapy/spidermiddlewares/referer.py incorrectly treats values resembling Python import paths as referrer policy classes, imp...