CVE-2026-97673

The Langflow OSS software versions 1.0.0 through 1.12.2 are affected by CVE-2026-97673 , which allows a remote authenticated attacker to execute arbitrary code due to improper input validation (CWE-693 ). This vulnerability can lead to high impact on confidentiality, integrity, and availability. ...

Linux Distros Unpatched Vulnerability : CVE-2026-106299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass syste...

Linux Distros Unpatched Vulnerability : CVE-2026-106206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-106414

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially...

Linux Distros Unpatched Vulnerability : CVE-2026-106343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper state validation in Autofill AI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML...

PT-2026-107699

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Splunk Enterprise versions prior to 10.2.7 Splunk Enterprise versions prior to 10.0.10 Splunk Enterprise versions prior to 9.4.15 Description Improper input validation in the REST API allows a user wi...

PT-2026-107374

In affected versions of Octopus Server, an authenticated user with permission to modify roles could bypass the protections preventing access abuse resulting in privilege escalation. It was possible for the built-in role to be weakened and the attacker's account added to a privileged team. This wa...

PT-2026-107545

Name of the Vulnerable Software and Affected Versions @backstage/plugin-kubernetes-backend versions prior to 0.21.8 Description Improper entity validation in a deprecated Kubernetes services endpoint allows an authenticated user with Kubernetes read permissions to access workload data beyond thei...

Linux Distros Unpatched Vulnerability : CVE-2026-106353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web orig...

PT-2026-107578

MISP contains a validation flaw in its object synchronization logic. When a MISP Object is created without a description, it is stored correctly on the originating instance. However, when that object is replicated to another MISP instance via the sync mechanism, the receiving instance's validatio...

PT-2026-107598

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description An issue exists due to improper input validation of special elements used in a command. This flaw is categorized under CWE-20, which refers to improper input validation, where the softwar...

PT-2026-107586

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller APIC affected versions not specified Description An authenticated remote attacker with administrative credentials can execute arbitrary commands as the root user on the underlying operating...

PT-2026-107548

Authenticated users are able to manipulate both the SMTP envelope “Envelope-from” and “From” fields when sending emails through OVH mail servers. Due to OVH's default SPF configuration, which commonly includes include:mx.ovh.com, any authenticated user with a valid OVH email account can send...

Linux Distros Unpatched Vulnerability : CVE-2026-106185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system...

MiracleLinux 9 : nodejs:24 (AXSA:2026-1984:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1984:01 advisory. undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation CVE-2026-85152 undici: undici: TLS certificat...

Linux Distros Unpatched Vulnerability : CVE-2026-106331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin...

Linux Distros Unpatched Vulnerability : CVE-2026-106226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof...

Linux Distros Unpatched Vulnerability : CVE-2026-106263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access...

PT-2026-107606

Name of the Vulnerable Software and Affected Versions Cisco networking software affected versions not specified Description Improper input validation occurs within the software, which is categorized under the Common Weakness Enumeration CWE Pillar CWE-20. This issue was identified during an...

PT-2026-107616

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description An issue exists in the VXLAN Operation, Administration, and Maintenance OAM feature, known as NGOAM, due to improper input validation of IP traffic. An unauthenticated remote...