CVE-2026-79417

A local improper access control vulnerability exists in ArgusMonitor.sys within Argotronic eGbR ArgusMonitor versions 7.4.02 and earlier . A Time-of-Check to Time-of-Use (TOCTOU) condition in IRP_MJ_CREATE allows local, low-privileged users to bypass device handle access restrictions. By sending ...

CVE-2026-92226: Improper Access Control

Joomla! Core - 20260913 - Core - Improper ACL checks for varous webservice edit tasks in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to perform edit actions on otherwise uneditable items...

CVE-2026-93332: Missing Authorization

Improper access control in the partial connection API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to read, create, modify, and delete System Vault entries via a crafted API request...

PT-2026-102470

Name of the Vulnerable Software and Affected Versions GitLab EE versions 17.9 through 19.2.6 GitLab EE versions 19.3 through 19.3.2 GitLab EE versions 19.4 Description Improper authorization enforcement allows an authenticated user with guest-level permissions to read private security policy...

ROS-20260929-73-0066

The vulnerability of the drivers/net/ethernet/cadence/macbmain.c component in the Linux operating system is related to improper synchronization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

FreeBSD: VID-3f11e437-b7cd-11f1-a883-2cf05da270f3 (CVE-2026-10518): Gitlab -- vulnerabilities

GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with guest-level permissions to read private security policy content they were not authoriz...

CVE-2026-92370: Improper Access Control

An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for...

CVE-2026-95382: Improper Input Validation

Improper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95274): chromium -- security fixes

Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95364): chromium -- security fixes

Improper input validation in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95382): chromium -- security fixes

Improper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

PT-2026-102510

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.36 Description An improper certificate validation issue exists where an unauthenticated attacker with adjacent network access can exploit the flaw. This may result in protectio...

CVE-2026-93330: Incorrect Behavior Order

Improper rule enforcement in the PAM Active Directory provider in Devolutions Server 2026.3.5 allows a user with PAM edit permissions to bypass the Devolutions Gateway host ruleset...

CVE-2026-71897: Incorrect Authorization

An improper authorization check in Apache DolphinScheduler allows an authenticated user to use the batch-copy and batch-move endpoints to operate on workflows in projects for which they lack the required permissions. This may allow the user to copy or move workflows from unauthorized projects. Th...

CVE-2026-76719: Improper Neutralization of Input During Web Page Generation

A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions...

CVE-2026-90913: Improper Access Control

Joomla! Core - 20260903 - Core - Improper ACL checks for access level webservice endpoints in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to perform mutation actions in access level endpoints...

PT-2026-102617

NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service...

ROS-20260929-73-0007

The vulnerability of the scsihostbusy function in the drivers/scsi/hosts.c module of the Linux SCSI device driver framework is related to improper initialization of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

PT-2026-102418

Name of the Vulnerable Software and Affected Versions OpenDMARC versions prior to 1.4.3 Description A flaw in the SPF Macro Handler component allows for improper authentication via remote manipulation. The issue resides in the opendmarc sp2 find mailfrom domain function within the...

CVE-2026-92224: Improper Neutralization of Input During Web Page Generation

Joomla! Core - 20260911 - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The link toolbar layout did not properly escape inputs, leading to an XSS vector...