PT-2026-66683

Name of the Vulnerable Software and Affected Versions CodeIgniter versions prior to 4.7.4 Description The is image and mime in upload validation rules fail to independently enforce a safe client filename extension. This allows a remote attacker to upload executable content if the application...

The vulnerability of the Unbound DNS server, related to insufficient validation of input data and improper implementation of functions, allows attackers to cause service failures.

The vulnerability of the Unbound DNS server is related to insufficient validation of input data and improper implementation of functions. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the verifyHostName configuration parameter in the Apache Log4j Core library allows a attacker to perform a “man-in-the-middle” attack.

The vulnerability of the verifyHostName configuration parameter in the Apache Log4j Core logging library is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to carry out a “man-in-the-middle” attack remotely...

PT-2026-66759

Name of the Vulnerable Software and Affected Versions fast-uri versions prior to 4.1.2 fast-uri versions prior to 3.1.5 fast-uri versions prior to 2.4.4 Description The software requires a literal double forward slash to recognize a URI authority. If a backslash-based introducer is used instead...

Erlang/OTP 17.0 < 27.3.4.15 / 28.0 < 28.5.0.4 / 29.0 < 29.0.4 Multiple Vulnerabilities

The version of Erlang/OTP installed on the remote host is 17.0 prior to 27.3.4.15, 28.0 prior to 28.5.0.4, or 29.0 prior to 29.0.4. It is, therefore, affected by multiple vulnerabilities: - The Erlang/OTP ssl TLS 1.2 and earlier and DTLS client does not verify that the cipher suite selected by th...

EUVD-2026-51644

PrestaShop module, totadministrativemandate 1.8.1 is vulnerable to Cross Site Request Forgery CSRF. The payment validation controller has no CSRF token. An attacker can confirm an order in an awaiting status by hijacking a link...

The vulnerability in the DataTransfer interface of Google Chrome allows a hacker to trigger a service failure.

The vulnerability of Google Chrome’s DataTransfer interface is related to insufficient validation of entered data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the Downloads component in the Google Chrome browser allows a hacker to trigger a service failure.

The vulnerability of the Downloads component in the Google Chrome browser is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

PT-2026-66857

Name of the Vulnerable Software and Affected Versions totadministrativemandate versions prior to 1.8.1 Description The payment validation controller in the PrestaShop module lacks a CSRF token, making it susceptible to Cross Site Request Forgery CSRF. This allows an attacker to confirm an order...

PT-2026-66761

HCL iControl was affected by Improper Input Validation vulnerability. It is vulnerable to unexpected system behavior and potential security bypasses. This was caused by an implementation flaw in an architectural security tactic that fails to properly validate whether the received input matches th...

IBM WebSphere Application Server input validation error vulnerability

IBM WebSphere Application Server is an application server product from IBM. Versions 8.5 and 9.0 of IBM WebSphere Application Server have security vulnerabilities. These vulnerabilities stem from input validation flaws in the HTTP request parsing component, leading to inconsistent interpretation ...

SUSE SLES15 Security Update : apptainer (SUSE-SU-2026:3417-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3417-1 advisory. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege...

Erlang/OTP 26.2 < 27.3.4.15 / 28.0 < 28.5.0.4 / 29.0 < 29.0.4 Policy Tree DoS (CVE-2026-59251)

The version of Erlang/OTP installed on the remote host is 26.2 prior to 27.3.4.15, 28.0 prior to 28.5.0.4, or 29.0 prior to 29.0.4. It is, therefore, affected by a vulnerability: - Allocation of resources without limits in Erlang/OTP publickey certificate path validation allows a remote...

CVE-2026-17791

An insufficient validation of untrusted input flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514006959...

CVE-2026-17774

An insufficient validation of untrusted input flaw was found in the Variations component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513323066...

CVE-2026-17686

An insufficient validation of untrusted input flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516917065...

CVE-2026-17681

An insufficient validation of untrusted input flaw was found in the Web Authentication component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516813184...

CVE-2026-17660

An insufficient validation of untrusted input flaw was found in the Network component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497428001...

CVE-2026-17651

An insufficient validation of untrusted input flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517307966...

CVE-2026-17655

An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522556145...