Google Chrome Vulnerability: CVE-2026-113030

Improper access control in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

Google Chrome Vulnerability: CVE-2026-113029

Improper access control in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

PT-2026-118352

Name of the Vulnerable Software and Affected Versions Cruise Control affected versions not specified Description The Jetty ConstraintSecurityHandler registers security constraints on exact path specifications without a catch-all wildcard constraint and fails to call setDenyUncoveredHttpMethodstru...

PT-2026-118391

Name of the Vulnerable Software and Affected Versions Seriously Simple Podcasting versions prior to 3.17.0 Description An issue exists where missing authorization allows for the exploitation of incorrectly configured access control security levels. Recommendations Update Seriously Simple Podcasti...

PT-2026-118579

Name of the Vulnerable Software and Affected Versions Participants Database versions prior to 2.7.8.5 Description An authorization bypass exists due to a user-controlled key, which allows the exploitation of incorrectly configured access control security levels. Recommendations Update to version...

PT-2026-118370

Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FX MEDIA driver callback, giving control of the instruction...

PT-2026-118417

Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a through 5.15.2...

Oracle Strategic Network Optimization security vulnerability

A security vulnerability exists in Oracle Strategic Network Optimization versions 12.2.3 through 12.2.15. This vulnerability stems from issues related to the Installation of the SNO component, potentially allowing unauthenticated attackers to gain HTTP access and take control of Strategic Network...

Oracle Enterprise Manager for Siebel security vulnerabilities

Versions 13.5 and 24.1 of Oracle Enterprise Manager for Siebel contain a security vulnerability stemming from issues in the Configuration Management component. This vulnerability may allow attackers with low privileges to gain HTTP access and take control of Oracle Enterprise Manager for Siebel...

Linux ipset Hash Generation Data Compromise

The vulnerability of the net/netfilter/ipset/ipsethashgen.h component of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibilit...

Linux driver irq-ts4800.c DoS

The vulnerability of the drivers/irqchip/irq-ts4800.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel/bpf/cgroup.c Bypass Data Compromise

The vulnerability of the kernel/bpf/cgroup.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the kfdcriuresumesvm function within the drivers/gpu/drm/amd/amdkfd/kfdsvm.c file of the Linux kernel operating system is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality,...

Linux kernel Control Flow DoS

The vulnerability of the Linux operating system’s kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-120134

IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability ...

PT-2026-118423

Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.9.7...

Siemens SIMATIC S7-1500 TM MFP Improper Control of a Resource Through its Lifetime (CVE-2026-23253)

In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: fix wrong reinitialization of ringbuffer on reopen dvbdvropen calls dvbringbufferinit when a new reader opens the DVR device. dvbringbufferinit calls initwaitqueuehead, which reinitializes the waitqueue list head...

Alibaba Cloud Linux 3 : 0310: libsoup (ALINUX3-SA-2026:0310)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0310 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-15711: A vulnerability was found in...

Atlassian Confluence 7.2.x < 9.2.26 / 9.3.x < 10.2.19 / 11.0.0 (CONFSERVER-104507)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104507 advisory. - Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2024-56657)

In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Avoid WARN for symlink errors Using WARN for showing the error of symlink creations don't give more information than telling that something goes wrong, since the usual code path is a lregister callback from each...