PT-2026-107679

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.16.0 until 3.0.14, ThreadSafeCookieStore incompletely validates cookie Domain attributes. Missing private-section and default public-suffix rules, absent...

CVE-2026-106206

Improper input validation in Mobile in Google Chrome on on iOS prior t...

CVE-2026-106414

Improper input validation in Mobile in Google Chrome on on iOS prior t...

PT-2026-107699

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Splunk Enterprise versions prior to 10.2.7 Splunk Enterprise versions prior to 10.0.10 Splunk Enterprise versions prior to 9.4.15 Description Improper input validation in the REST API allows a user wi...

CVE-2026-106185

Improper input validation in Viz in Google Chrome prior to 155.0.8059...

CVE-2026-106353

Improper input validation in Mobile in Google Chrome on on iOS prior t...

CVE-2026-43598

Improper input validation in the AMD ROCm Communication Collectives Li...

CVE-2026-106331

Improper input validation in Extensions in Google Chrome prior to 155...

Linux Distros Unpatched Vulnerability : CVE-2026-106346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox...

Linux Distros Unpatched Vulnerability : CVE-2026-106331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin...

PT-2026-107606

Name of the Vulnerable Software and Affected Versions Cisco networking software affected versions not specified Description Improper input validation occurs within the software, which is categorized under the Common Weakness Enumeration CWE Pillar CWE-20. This issue was identified during an...

PT-2026-107542

Name of the Vulnerable Software and Affected Versions @backstage/plugin-scaffolder-backend-module-confluence-to-markdown versions prior to 0.3.25 Description Improper repository path validation in a scaffolder backend module allows an authenticated user who can execute an affected template and...

PT-2026-107534

Name of the Vulnerable Software and Affected Versions @backstage/plugin-scaffolder-backend-module-confluence-to-markdown versions prior to 0.3.25 Description Improper input validation in the Confluence to Markdown scaffolder module allows an attacker to influence file write operations during...

PT-2026-107545

Name of the Vulnerable Software and Affected Versions @backstage/plugin-kubernetes-backend versions prior to 0.21.8 Description Improper entity validation in a deprecated Kubernetes services endpoint allows an authenticated user with Kubernetes read permissions to access workload data beyond thei...

PT-2026-107578

MISP contains a validation flaw in its object synchronization logic. When a MISP Object is created without a description, it is stored correctly on the originating instance. However, when that object is replicated to another MISP instance via the sync mechanism, the receiving instance's validatio...

PT-2026-107548

Authenticated users are able to manipulate both the SMTP envelope “Envelope-from” and “From” fields when sending emails through OVH mail servers. Due to OVH's default SPF configuration, which commonly includes include:mx.ovh.com, any authenticated user with a valid OVH email account can send...

PT-2026-107616

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description An issue exists in the VXLAN Operation, Administration, and Maintenance OAM feature, known as NGOAM, due to improper input validation of IP traffic. An unauthenticated remote...

PT-2026-107598

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description An issue exists due to improper input validation of special elements used in a command. This flaw is categorized under CWE-20, which refers to improper input validation, where the softwar...

Linux Distros Unpatched Vulnerability : CVE-2026-106206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-106185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system...