CVE-2026-17900

CVE-2026-17900 : In Google Chrome for Windows, an inappropriate Enterprise implementation allowed a remote attacker to leak cross-origin data via a malicious file. Affected versions are prior to 151.0.7922.72. Chromium security severity is Low. Remediation: update to 151.0.7922.72 or later.

CVE-2026-17666

CVE-2026-17666 is a cryptographic flaw in Google Chrome (Enterprise) that affected Chrome versions prior to 151.0.7922.72. An attacker in a privileged network position could bypass discretionary access control via malicious network traffic. The CVSS v3.1 base score is 9.1 (CRITICAL). Remediation:...

CVE-2026-30823

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, there is an IDOR vulnerability, leading to account takeover and enterprise feature bypass via SSO configuration. This issue has been patched in version 3.0.13...

CVE-2026-30823

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, there is an IDOR vulnerability, leading to account takeover and enterprise feature bypass via SSO configuration. This issue has been patched in version 3.0.13...

CVE-2026-30823 Flowise: IDOR leading to Account Takeover and Enterprise Feature Bypass via SSO Configuration

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, there is an IDOR vulnerability, leading to account takeover and enterprise feature bypass via SSO configuration. This issue has been patched in version 3.0.13...

CVE-2026-30823

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, there is an IDOR vulnerability, leading to account takeover and enterprise feature bypass via SSO configuration. This issue has been patched in version 3.0.13...

CVE-2026-30823

Flowise (prior to 3.0.13) has an insecure direct object reference (IDOR) vulnerability in PUT /api/v1/loginmethod that lets an authenticated user overwrite another organization’s SSO configuration, enabling enterprise features and potentially leading to account takeover and credential theft. The ...

CVE-2026-30823 Flowise: IDOR leading to Account Takeover and Enterprise Feature Bypass via SSO Configuration

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, there is an IDOR vulnerability, leading to account takeover and enterprise feature bypass via SSO configuration. This issue has been patched in version 3.0.13...

Vault’s Login MFA Configuration And Enforcement Not Reloaded After Restart

Summary A vulnerability was identified in Vault and Vault Enterprise “Vault” from 1.10.0 to 1.10.2 where MFA may not be enforced on user logins after a server restart. This vulnerability, CVE-2022-30689, was fixed in Vault 1.10.3. Background Vault provides a wide range authentication methods,...