EUVD-2026-41876

swoosh has email-derived URL path injection in Microsoft Graph endpoint...

Coder input validation error vulnerability

Versions of Coder 2.3.1 to 2.14.4, 2.15.x versions before 2.15.3, and 2.16.0 to 2.16.1 contain a vulnerability related to input validation errors. This vulnerability stems from improper cleaning of the redirect query parameters on the login page. It may lead to open redirection attacks. Attackers...

Thorsten Rinne phpMyFAQ input validation vulnerability

Thorsten Rinne’s phpMyFAQ versions from 4.2.0-alpha to 4.2.0-beta have a vulnerability related to input validation. This vulnerability stems from a storage-side cross-site scripting vulnerability in SvgSanitizer. Attackers can split script tags around removed markers, allowing for reassembly afte...

WordPress PAYCOMET for WooCommerce: Cross-site Script Vulnerability

WordPress PAYCOMET for WooCommerce versions 5.45 and earlier have a cross-site scripting vulnerability. This vulnerability stems from improper input validation during page generation, which may lead to reflection-type cross-site scripting attacks...

Coder input validation error vulnerability

Coder 2.0.0 to 2.34.8 versions had a vulnerability related to input validation errors. This vulnerability stemmed from the lack of cleanup of the r.URL.Path value in handleAPIKeySmuggling. It was vulnerable to open redirection attacks, allowing attackers to redirect users to the attacker’s site b...

CVE-2026-110916

An improper input validation flaw was found in the Desktop component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/501886301...

Chromium CVE-2026-106226: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106185: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106396: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106263: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106331: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106299: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2026-94646

Uncaught exception, Improper validation of specified quantity in input, Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift nodejs bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

Vulnerabilities Affecting SICK CorivaHub

SICK CorivaHub includes the third-party components Apache Tomcat and MapLibre GL, which are affected by two known vulnerabilities. These vulnerabilities include an improper input validation issue in Apache Tomcat and a vulnerability in MapLibre GL that could allow malicious behavior through custo...

Vulnerabilities in Adobe Commerce

Adobe has identified several vulnerabilities in Adobe Commerce. These vulnerabilities involve stored Cross-Site Scripting XSS, where attackers can inject malicious JavaScript code into form fields within the application. This code is executed in the victim’s browser and can perform unauthorized...

Linux Distros Unpatched Vulnerability : CVE-2026-110916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox...

CVE-2026-96620: Improper Input Validation

Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is passed to the Claude CLI as a separate token without validation, so a dash-leading value is parsed as an independent CLI flag. An attacker can inject the --mcp-config flag to define a stdio MCP server, causin...

CVE-2026-110916

Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-103350 WordPress Booking and Rental Manager plugin <= 2.8.0 - Other vulnerability Type vulnerability

Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Removing Important Client Functionality.This issue affects Booking and Rental Manager: from n/a through 2.8.0...

Guangzhou Juan IoT EseeCloud App has a vulnerability in input validation.

The Guangzhou Juan IoT EseeCloud App versions 4.9.6 and earlier, as well as the EseeCloud Firmware version 4.9.86.0 and earlier, have a vulnerability in input validation. This vulnerability arises from improper verification of device unbinding and re-binding operations by the server. Attackers ca...