OESA-2026-4586 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allo...

OESA-2026-4584 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allo...

CVE-2026-99016

A flaw was found in the Linux kernel's RISC-V architecture implementation. When the tagged address Application Binary Interface ABI is enabled, the kernel's fast user-space locking mechanism futex verifies an address after stripping its tag, but executes atomic memory operations using the origina...

Alibaba Cloud Linux 3 : 0330: tftp (ALINUX3-SA-2026:0330)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0330 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-85234: A flaw was found in tftp-hpa. When...

Alibaba Cloud Linux 3 : 0325: libpcap (ALINUX3-SA-2026:0325)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0325 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-0799: In BPF instructions that load/store ...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the strict-mode lock implementation in strict.py and related soft read-write lock components, where claim directories are created with permissions that allow other local users to...

CVE-2026-106484

Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a malicious file. Chromium security severity: Medium...

CVE-2026-118646 n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node

n8n before 1.123.85, 2.43.5, and 2.44.1 contains a regular expression denial of service vulnerability that allows authenticated members to block the event loop via crafted glob patterns. Attackers who can create and run workflows can submit a wildcard-heavy Files Selector pattern causing...

CVE-2026-118646 n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node

n8n before 1.123.85, 2.43.5, and 2.44.1 contains a regular expression denial of service vulnerability that allows authenticated members to block the event loop via crafted glob patterns. Attackers who can create and run workflows can submit a wildcard-heavy Files Selector pattern causing...

CVE-2026-118646

The software n8n (versions before 1.123.85, 2.43.5, and 2.44.1) is vulnerable to a Regular Expression Denial of Service (ReDoS) . Authenticated members with the ability to create and run workflows can provide a wildcard-heavy File(s) Selector pattern. This causes exponential backtracking during g...

CVE-2026-106484

Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a malicious file. Chromium security severity: Medium...

EUVD-2026-112366

Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a malicious file. Chromium security severity: Medium...

CVE-2026-106484

In Google Chrome on Linux , a vulnerability exists in the chrome-devtools-mcp component affecting versions prior to 1.5.0 . The root cause is insufficient policy enforcement , which allows a local attacker to perform arbitrary read/write operations by utilizing a malicious file . Exploitation det...

CVE-2026-106484

Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a malicious file. Chromium security severity: Medium...

CVE-2026-106484

Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a malicious file. Chromium security severity: Medium...

CVE-2026-106484: Google chrome-devtools-mcp: Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local…

Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a malicious file. Chromium security severity: Medium...

PT-2026-130609

Summary The /credentials/signurl endpoint decides authorization from the client-supplied X-Rucio-Account HTTP header instead of the authenticated token's account. Any client holding any valid auth token even a low-privilege account they legitimately own can send X-Rucio-Account: root to pass the...

Chrome DevTools for agents security vulnerability

A security vulnerability exists in Chrome DevTools for agents versions prior to 1.5.0. This vulnerability stems from insufficient policy enforcement and may allow local attackers to perform arbitrary read/write operations via malicious files...

PT-2026-129117

Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a malicious file. Chromium security severity: Medium...

CVE-2026-87897

A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentication token for another user. A low privileged attacker could continually exploit this vulnerability to leak the JWT authentication token for another user when they start a...