CVE-2026-19286

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due to improper enforcement of security restrictions on the A2A public endpoint...

EUVD-2026-58793

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input...

CVE-2026-16879 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input...

CVE-2026-62420 Cross-project cluster migration bypasses project restrictions via cluster notification flag

An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project security restrictions during cross-project instance migrations. When moving an instance cross-project to a different cluster member via POST /1.0/instances/name with migration: true, project: ,...

CVE-2026-19143

A flaw was found in Google Chrome on Android. This vulnerability, related to insufficient validation of untrusted input in WebAPKs, allows a local attacker to perform a sandbox escape. By crafting and using a malicious file, an attacker can bypass security restrictions designed to isolate...

CVE-2026-16807

A flaw was found in the Codecs component of Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability through a specially crafted HTML page. This could potentially allow the attacker to bypass security restrictions and gain unauthorized access to the underlying system...

CVE-2026-64111

A flaw was found in the Linux kernel's Security Module LSM. A local attacker could exploit this vulnerability by leveraging an improper handling of a credential guard mutex in the lsmsetselfattr function. This oversight may allow the attacker to bypass security restrictions enforced by modules su...

ROS-20260708-73-0029

The vulnerability of the Auth Proxy function of the Grafana monitoring and logging platform relates to the default use of addresses with a mask of /32 when using a list of allowed IP addresses. Exploiting this vulnerability could allow an attacker to bypass security restrictions remotely...

ROS-20260707-73-0029

The vulnerability in Python-Django is related to incomplete comparisons with missing factors. Exploiting this vulnerability can allow attackers to bypass existing security restrictions...

The vulnerability of the Rack::Request component in the Ruby programming language’s Rack web server module allows attackers to circumvent existing security restrictions.

The vulnerability of the Rack::Request component in the Ruby-based Rack web server module interface is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

The vulnerability of Google Chrome and Microsoft Edge web browsers allows attackers to circumvent existing security restrictions.

The vulnerability of Google Chrome and Microsoft Edge browser services is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

The vulnerability of Google Chrome and Microsoft Edge browser password managers allows attackers to bypass security restrictions.

The vulnerability of Google Chrome and Microsoft Edge browser password managers is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

The vulnerability of the DevTools set of tools for web development in Google Chrome allows a hacker to bypass existing security restrictions.

The vulnerability of the DevTools set of tools for web development in the Google Chrome browser is related to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions through a specially created HTML page...

Multiple Mozilla product logic processing errors (CNVD-2026-26878)

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox ESR is an extended support version of Firefox the web browser developed by the Mozilla Foundation. Mozilla Thunderbird is an email client software independently developed from t...

The vulnerability of Google Chrome’s browser, related to a data source confirmation error, allows attackers to circumvent existing security restrictions.

The vulnerability of Google Chrome is related to a data source confirmation error. Exploiting this vulnerability allows an attacker to bypass existing security restrictions through a specially created HTML page...

ROS-20260623-73-0005

The vulnerability of the debugging function in the CPython interpreter relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

Vulnerability of the Networking component: Mozilla Firefox, Firefox ESR, and Thunderbird email client’s HTTP browsers allow attackers to bypass existing security restrictions.

The vulnerability of the Networking component: Mozilla Firefox, Firefox ESR, and the email client Thunderbird rely on bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions...

ROS-20260610-73-0008

The vulnerability in Thunderbird is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker who operates remotely to circumvent existing security restrictions...

The vulnerability in the debugging function of the CPython interpreter allows attackers to circumvent security restrictions.

The vulnerability of the debugging function in the CPython interpreter relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

The vulnerability of the Cast component in Google Chrome and Microsoft Edge browsers allows attackers to bypass existing security restrictions.

The vulnerability of the Cast component in Google Chrome and Microsoft Edge relates to a flaw in data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass existing security restrictions through a specially created HTML page...