CVE-2026-101331: Insufficiently Protected Credentials

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to insufficiently protected credentials...

CVE-2026-97717: Uncontrolled Resource Consumption

CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60. Authenticated attackers can send malformed data to the server and cause a persistent denial of service...

CVE-2026-58068: Missing Authorization

This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system...

CVE-2026-88514

A vulnerability in iTerm2 for macOS before version 3.6.12 allows a local attacker to obtain sensitive information . The issue is associated with CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). While the documents confirm the existence of the vulnerability and its impact on c...

EUVD-2026-94359

An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information...

PT-2026-107510

An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information...

PT-2026-107570

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogs pfcp xact local create of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The...

CVE-2026-88514

An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information...

PT-2026-107422

This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it...

CVE-2026-106587

In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled...

Linux Distros Unpatched Vulnerability : CVE-2026-106210

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension...

Linux Distros Unpatched Vulnerability : CVE-2026-106340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via...

Linux Distros Unpatched Vulnerability : CVE-2026-106232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a craft...

Linux Distros Unpatched Vulnerability : CVE-2026-106326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged page...

Linux Distros Unpatched Vulnerability : CVE-2026-106350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-106264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via ...

CVE-2026-20032: Improper Isolation or Compartmentalization

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system of an affected device. This vulnerability is due to insufficient validati...

PT-2026-107583

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description Insufficient validation of user-supplied input in the Python interpreter allows an authenticated, local attacker with low privileges to escape the Python sandbox. By manipulating...

PT-2026-107621

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description An issue exists in the Segment Routing over IPv6 SRv6 Operation, Administration, and Maintenance OAM feature, known as NGOAM. This is caused by improper input validation of IP...

PT-2026-107596

Name of the Vulnerable Software and Affected Versions Cisco License On-Prem affected versions not specified Description Improper input validation and a lack of authentication in the Cisco Smart Licensing Utility API allow an unauthenticated remote attacker to send crafted requests to the manageme...