PT-2026-23780

Name of the Vulnerable Software and Affected Versions Philips Hue Bridge versions affected versions not specified Description A flaw exists in the Philips Hue Bridge’s hk hap component related to Ed25519 signature verification. This issue allows for authentication bypass. The vulnerability was...

PT-2026-23779

Name of the Vulnerable Software and Affected Versions Philips Hue Bridge affected versions not specified Description The Philips Hue Bridge contains a heap-based buffer overflow in the hk hap characteristics component. This issue allows for remote code execution. The vulnerability was discovered...

(Pwn2Own) Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the SRP authentication mechanism in the HomeKit Accesso...

(Pwn2Own) Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2026-28468

OpenClaw versions 2026.1.29-beta.1 prior to 2026.2.14 contain a vulnerability in the sandbox browser bridge server in which it accepts requests without requiring gateway authentication, allowing local attackers to access browser control endpoints. A local attacker can enumerate tabs, retrieve...

CVE-2026-28468 OpenClaw 2026.1.29-beta.1 < 2026.2.14 - Authentication Bypass in Sandbox Browser Bridge Server

OpenClaw versions 2026.1.29-beta.1 prior to 2026.2.14 contain a vulnerability in the sandbox browser bridge server in which it accepts requests without requiring gateway authentication, allowing local attackers to access browser control endpoints. A local attacker can enumerate tabs, retrieve...

CVE-2026-28468

OpenClaw versions 2026.1.29-beta.1 prior to 2026.2.14 contain a vulnerability in the sandbox browser bridge server in which it accepts requests without requiring gateway authentication, allowing local attackers to access browser control endpoints. A local attacker can enumerate tabs, retrieve...

EUVD-2026-9914

OpenClaw versions 2026.1.29-beta.1 prior to 2026.2.14 contain a vulnerability in the sandbox browser bridge server in which it accepts requests without requiring gateway authentication, allowing local attackers to access browser control endpoints. A local attacker can enumerate tabs, retrieve...

CVE-2026-28468

OpenClaw: A sandbox browser bridge server vulnerability in versions 2026.1.29-beta.1 prior to 2026.2.14 allows local attackers to bypass gateway authentication and access browser control endpoints. A local attacker can enumerate tabs, retrieve WebSocket URLs, execute JavaScript, and exfiltrate co...

CVE-2026-28468 OpenClaw 2026.1.29-beta.1 < 2026.2.14 - Authentication Bypass in Sandbox Browser Bridge Server

OpenClaw versions 2026.1.29-beta.1 prior to 2026.2.14 contain a vulnerability in the sandbox browser bridge server in which it accepts requests without requiring gateway authentication, allowing local attackers to access browser control endpoints. A local attacker can enumerate tabs, retrieve...

CVE-2026-28468 OpenClaw 2026.1.29-beta.1 < 2026.2.14 - Authentication Bypass in Sandbox Browser Bridge Server

OpenClaw versions 2026.1.29-beta.1 prior to 2026.2.14 contain a vulnerability in the sandbox browser bridge server in which it accepts requests without requiring gateway authentication, allowing local attackers to access browser control endpoints. A local attacker can enumerate tabs, retrieve...

langchain-openai-api-bridge (>=0.1.0, <=0.6.3) potentially affected by CVE-2026-28277 via langgraph (0.0.62)

langgraph PYPI version 0.0.62 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - langchain-openai-api-bridge =0.1.0, =0.6.3 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

biomni-bridge (>=0.3.1, <=0.3.3), copilotkit (>=0.1.50, <=0.1.52a2) potentially affected by CVE-2026-28277 via langgraph (0.3.18)

langgraph PYPI version 0.3.18 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - biomni-bridge =0.3.1, =0.1.50, =0.1.52a2 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

langchain-openai-api-bridge (>=0.1.0, <=0.6.3) potentially affected by CVE-2026-28277 via langgraph (0.0.62)

langgraph PYPI version 0.0.62 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - langchain-openai-api-bridge =0.1.0, =0.6.3 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

biomni-bridge (>=0.3.1, <=0.3.3), copilotkit (>=0.1.50, <=0.1.52a2) potentially affected by CVE-2026-28277 via langgraph (0.3.18)

langgraph PYPI version 0.3.18 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - biomni-bridge =0.3.1, =0.1.50, =0.1.52a2 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

EUVD-2026-9827

Cross-Site Request Forgery CSRF vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Flutter URI scheme handler, FFI bridge modules allows Privilege Escalation. This vulnerability is associated with program files flutter/lib/common.Dart,...

CVE-2026-30793

The CVE-2026-30793 entry concerns RustDesk Client (rustdesk-client) on Windows, macOS, Linux, iOS, Android (Flutter URI scheme handler, FFI bridge modules). A Cross-Site Request Forgery (CSRF) vulnerability affects the client via rustdesk://password/ flows and related program routines (flutter/li...

CVE-2026-28468: Missing Authentication for Critical Function

OpenClaw versions 2026.1.29-beta.1 prior to 2026.2.14 contain a vulnerability in the sandbox browser bridge server in which it accepts requests without requiring gateway authentication, allowing local attackers to access browser control endpoints. A local attacker can enumerate tabs, retrieve...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-005605)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005605 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: fix memory corruption with too many bridges Add the missing sanity check on the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005725)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005725 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: fix memory corruption with too many bridges Add the missing sanity check on the...