CVE-2026-88514

An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information...

PT-2026-107621

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description An issue exists in the Segment Routing over IPv6 SRv6 Operation, Administration, and Maintenance OAM feature, known as NGOAM. This is caused by improper input validation of IP...

Linux Distros Unpatched Vulnerability : CVE-2026-106212

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive...

Linux Distros Unpatched Vulnerability : CVE-2026-106254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via a co-installed app...

yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user

When no system-installed liblz4-java is found, net.jpountz.util.Native.load extracts the bundled native library to java.io.tmpdir and loads it with System.load. The path of the extracted library can be predicted before it is created, and the library file is opened without exclusive creation...

PT-2026-111233

Уязвимость микропрограммного обеспечения сетевых устройств Cisco Meraki связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...

Linux Distros Unpatched Vulnerability : CVE-2026-106356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page...

CVE-2026-20328: Missing Authorization

A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to gain unauthorized access to an affected application. This vulnerability is due to improper checks during th...

Linux Distros Unpatched Vulnerability : CVE-2026-106372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a...

Linux Distros Unpatched Vulnerability : CVE-2026-106326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged page...

EUVD-2026-94359

An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information...

Linux Distros Unpatched Vulnerability : CVE-2026-106340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via...

CVE-2026-88514

A vulnerability in iTerm2 for macOS before version 3.6.12 allows a local attacker to obtain sensitive information . The issue is associated with CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). While the documents confirm the existence of the vulnerability and its impact on c...

PT-2026-107422

This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it...

Power Side-Channel Membership Inference Attack on Embedded Machine Learning

Membership inference attacks MIAs threaten the privacy of machine learning ML training data by determining whether a sample was used to train a target model. Existing MIAs rely on model outputs, ranging from prediction probabilities to predicted labels, an assumption that can be restrictive for...

PT-2026-107426

Name of the Vulnerable Software and Affected Versions ERP system affected versions not specified Description Improper validation of payment callback parameters and inadequate authentication controls in an API endpoint allow an unauthenticated remote attacker to manipulate parameters. This can cau...

Security update for wpa_supplicant (important)

openSUSE security update: security update for wpasupplicant ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22022-1 Rating: important References: bsc1280914 Cross-References: CVE-2026-78807 CVSS scores: CVE-2026-78807 SUSE : 7.1...

Xen Hypervisor DMOP Compromise

The vulnerability of the DMOP call processing code in Xen hypervisors is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux Distros Unpatched Vulnerability : CVE-2026-106232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a craft...

Linux Distros Unpatched Vulnerability : CVE-2026-106264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via ...