CVE-2026-97155

Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may invoke its functions by default. The registry value VALIDDOMAINS, which limits permitted origins, was optional and empt...

PT-2026-97701

Name of the Vulnerable Software and Affected Versions Fabasoft Folio Client versions prior to 2026 Description A locally installed component that communicates with the browser extension via web messaging does not restrict which web origins may invoke its functions by default. The registry value...