Chromium: CVE-2026-17666 Cryptographic Flaw in Enterprise

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-17872 Cryptographic Flaw in WebAppInstalls

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2026-17666

Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access control via malicious network traffic. Chromium security severity: High...

The vulnerability of the G3413CTRBlockCipher file in the Java Bouncy Castle cryptographic library allows a hacker to disclose protected information.

The vulnerability of the G3413CTRBlockCipher file in the Java Bouncy Castle cryptographic library is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

SUSE SLED15 / SLES15 Security Update : python-urwid (SUSE-SU-2026:3425-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3425-1 advisory. This update for python-urwid fixes the following issue CVE-2026-9323: web session IDs generated by Screen.start are not...

CVE-2026-17666

A cryptographic flaw flaw was found in the Enterprise component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=511761758...

CVE-2026-17872

A cryptographic flaw flaw was found in the WebAppInstalls component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521963740...

CVE-2026-5846 Hard-coded Cryptographic Key in Watchfire Controllers

The affected Watchfire Controller Software contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS connections to the controller's built-in web management interface. These keys are embedded in plaintext within the...

SUSE CVE-2026-17872

Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-51102

CentreStack before 17.4 contains an XML external entity XXE injection vulnerability that allows unauthenticated attackers to exfiltrate arbitrary files by supplying a malicious URL to the SharePoint storage configuration handler. Attackers can send a crafted request to the unauthenticated...

Security update for python-urwid

This update for python-urwid fixes the following issue CVE-2026-9323: web session IDs generated by Screen.start are not cryptographically secure bsc1271868. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

CVE-2026-13577

A flaw was found in Dancer2. When Cryptographically Secure PseudoRandom Number Generator CSPRNG modules are not available, Dancer2 generates insecure session identifiers IDs. This occurs because the system falls back to using a less secure, built-in random number generator. An attacker could...

CVE-2026-44104 ControllerAgent does not perform validation of firmware

The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise...

CVE-2026-47882

When enabling Spring Boot DevTools support for a remote application target for example a Docker container or Cloud Foundry app from the Spring Tools Boot Dashboard, Spring Tools generates a shared secret that authenticates DevTools remote-restart uploads to the deployed application. This secret w...

CVE-2026-47882

When enabling Spring Boot DevTools support for a remote application target for example a Docker container or Cloud Foundry app from the Spring Tools Boot Dashboard, Spring Tools generates a shared secret that authenticates DevTools remote-restart uploads to the deployed application. This secret w...

CVE-2026-47882

CVE-2026-47882 affects Spring Tools for Eclipse (5.2.0 and earlier) where Spring Tools DevTools remote-restart uploads authenticate with a shared secret generated by a non-cryptographic PRNG. Root cause: secret generation relies on non-cryptographic randomness, weakening authenticity of remote-re...

EUVD-2026-50973

When enabling Spring Boot DevTools support for a remote application target for example a Docker container or Cloud Foundry app from the Spring Tools Boot Dashboard, Spring Tools generates a shared secret that authenticates DevTools remote-restart uploads to the deployed application. This secret w...

CVE-2026-47882 Spring Boot DevTools remote secret generated with a non-cryptographic PRNG

When enabling Spring Boot DevTools support for a remote application target for example a Docker container or Cloud Foundry app from the Spring Tools Boot Dashboard, Spring Tools generates a shared secret that authenticates DevTools remote-restart uploads to the deployed application. This secret w...

DEBIAN-CVE-2026-17872

Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17872

Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...