Linux Distros Unpatched Vulnerability : CVE-2026-109750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. CVE-2026-109750 Note that Nessus...

CVE-2026-104198 ZoneMinder failed token handling bypasses web authentication

ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php. validateToken returns false when a token is malformed or has an invalid signature, but the calle...

CVE-2026-104198 ZoneMinder failed token handling bypasses web authentication

ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php. validateToken returns false when a token is malformed or has an invalid signature, but the calle...

Astra Linux – Vulnerability in Chromium

The use of after free in Web Authentication in Google Chrome before version 149.0.7827.155 allowed a remote attacker to execute arbitrary code through a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations of WebAuthentication in Google Chrome prior to version 96.0.4664.45 allowed a remote attacker to leak cross-origin data through a crafted HTML page...

CVE-2026-109750

Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

UBUNTU-CVE-2026-109750

Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

SUSE CVE-2026-109750

Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

Web Authentication Passkeys Security Keys Access

The vulnerability of the Web Authentication components Passkeys & Security Keys in Google Chrome and Microsoft Edge is related to improper authorization. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...

Web Authentication Components Compromise Data Compromise

The vulnerability of the Web Authentication components Passkeys & Security Keys in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected...

CVE-2026-109750

Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109750 Site isolation issue in the DOM: Web Authentication component

Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109750

A site isolation issue exists in the DOM: Web Authentication component of Firefox and Thunderbird . This vulnerability was addressed in version 158 for both products. While the technical root cause is not detailed in the documents, the issue is associated with CWE-862 (Missing Authorization) and ...

CVE-2026-109750

Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109750: Missing Authorization

Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

PT-2026-111471

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Thunderbird versions prior to 158 Description A site isolation issue exists within the DOM Web Authentication component. Site isolation is a security mechanism that ensures web pages from different sites are...

oauth2-proxy

OAuth2 Proxy è uno strumento open-source flessibile che può fungere da reverse proxy autonomo o da middleware integrato in configurazioni di reverse proxy o load balancer esistenti. Fornisce un modo semplice e sicuro per proteggere le tue applicazioni web con l'autenticazione OAuth2 / OIDC. Come...

Linux Distros Unpatched Vulnerability : CVE-2026-106264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via ...

DEBIAN-CVE-2026-106264

Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106264

Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...