CVE-2026-19171

A flaw was found in chromium-browser. This use-after-free vulnerability in the Media component allows a remote attacker to potentially escape the browser's security sandbox. Exploitation can occur by enticing a user to visit a specially crafted HTML page...

CVE-2026-0289

A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls...

CVE-2026-0290

An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data...

CVE-2026-0290 Prisma Browser: Sensitive Information Disclosure Vulnerability

An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data...

CVE-2026-0290

An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data...

EUVD-2026-57704

An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data...

CVE-2026-0290 Prisma Browser: Sensitive Information Disclosure Vulnerability

An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data...

CVE-2026-0290

Technical details about CVE-2026-0290 are not publicly available in the provided documents. Monitor for updates; descriptions indicate an information disclosure in Prisma Browser Account Protection, but no affected versions, attack vectors, or remediation are specified.

CVE-2026-0289

CVE-2026-0289 is described as a security bypass in the Account Protection feature of Palo Alto Networks Prisma Browser. The available connected documents identify the affected product as Prisma Browser and reference a bypass of intended security controls, but do not provide concrete technical det...

CVE-2026-0289 Prisma Browser: Inappropriate Implementation in Account Protection

A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls...

CVE-2026-0289 Prisma Browser: Inappropriate Implementation in Account Protection

A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls...

CVE-2026-0289

A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls...

EUVD-2026-57703

A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls...

PT-2026-71439

File Browser versions from 2.50.0 through 2.63.21 fail to validate JWT expiration when proxy authentication is configured with a non-default logout page. Attackers with a previously valid token can access protected routes and administrative endpoints indefinitely, and exchange expired tokens for...

PT-2026-71441

filebrowser versions before 2.63.19 contain an out-of-scope file deletion vulnerability in the TUS upload cache eviction mechanism that allows authenticated users with only Create permission to delete arbitrary files outside their scope. Attackers can swap an ancestor directory with a symlink...

PT-2026-71440

File Browser before v2.63.22 fails to validate access rules for descendants during recursive copy, rename, and delete operations, allowing authenticated users to bypass path-based access controls. Attackers can copy, rename, or delete denied files by operating on their allowed parent directory,...

EUVD-2026-57417

ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An unauthenticated attacker who lures a victim into visiting a crafted URL can execute arbitrary JavaScript in the context of the victim's browser session...

CVE-2026-19657 ScadaLTS Unauthenticated Reflected XSS

ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An unauthenticated attacker who lures a victim into visiting a crafted URL can execute arbitrary JavaScript in the context of the victim's browser session...

EUVD-2026-57327

Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to DOM-based cross-site scripting in jsonquery.js. Unencoded JSON string values reflected from stored fields are inserted into the DOM without sanitization, allowing attackers to run arbitrary JavaScript in the victim's browse...

CVE-2026-19560

A flaw was found in chromium-browser. A remote attacker could exploit a use-after-free vulnerability in the Blink component by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution within the sandbox environment, potentially compromising the affected...