CVE-2026-21132: Undefined Security Weakness

Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability...

CVE-2026-21130: Improper Input Validation

Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges...

CVE-2026-21129: Improper Input Validation

Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges...

CVE-2026-94451: Improper Input Validation

Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw was found where certain endpoints do not properly check the sort parameter provided by users. This could allow an attacker to learn information they should not have access to or slow down t...

CVE-2026-96012: Undefined Security Weakness

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this vulnerability to obtain elevated...

CVE-2026-109425: Improper Validation of Syntactic Correctness of Input

Tink-go tink-crypto/tink-go through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecrets and ReadWithNoSecrets skip the structural Validate step before constructing a keyset.Handle, allowing malformed public or no-secret keysets that violate Tink's keyset invariant...

PT-2026-110903

Name of the Vulnerable Software and Affected Versions Tink-go versions prior to 2.8.1 Description An input-validation issue exists where the functions NewHandleWithNoSecrets and ReadWithNoSecrets skip the structural Validate step before constructing a keyset.Handle. This allows malformed public o...

Cisco Meraki Data Compromise

The vulnerability of Cisco Meraki network device software-related microprograms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of protected information...

CVE-2026-78673: Improper Input Validation

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation...

ROS-20261012-73-0170

The vulnerability of the kernel network module in the Linux operating system is related to incorrect checking of the amount of data at the input. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-84317: Improper Input Validation

Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, internal/config/validation.go ValidateConfigFile is a security control that blocks dangerous nginx directives — js, perl, loadmodule of the njs/perl modules, and user root. It is enforced on three of the four config-write...

AlmaLinux 9.6 [TuxCare] Security Update: ignition / ignition-edge / ignition-grub / ignition-validate (ALMALINUX9.6:CLSA-2026:1791487723)

"The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791487723 advisory. - gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input...

Rocky Linux 9.6 [TuxCare] Security Update: ignition / ignition-edge / ignition-grub / ignition-validate (ALMALINUX9.6:CLSA-2026:1791487723)

"The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791487723 advisory. - gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input...

Improper Input Validation

Bouncy Castle for Java is vulnerable to Improper Input Validation. The vulnerability is due to the MTI/A0 Diffie-Hellman agreement process exponentiating unvalidated peer-supplied values without range or subgroup-membership checks, which allows a malicious peer to recover the local static private...

CVE-2026-106263

An improper input validation flaw was found in the SignIn component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553149001...

CVE-2026-106226

An improper input validation flaw was found in the Compositing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/520573237...

CVE-2026-106206

An improper input validation flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517374100...

CVE-2026-106185

An improper input validation flaw was found in the Viz component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/502462485...

OPENSUSE-SU-2026:22080-1 Security update for squid

This update for squid fixes the following issues: - CVE-2026-32748: denial of service in ICP Request handling bsc1260453. - CVE-2026-33515: out of bounds read in ICP message handling bsc1260454. - CVE-2026-33526: denial of service in ICP Request handling bsc1260452. - CVE-2026-47729: out-of-bound...

SUSE-SU-2026:24224-1 Security update for squid

This update for squid fixes the following issues: - CVE-2026-32748: denial of service in ICP Request handling bsc1260453. - CVE-2026-33515: out of bounds read in ICP message handling bsc1260454. - CVE-2026-33526: denial of service in ICP Request handling bsc1260452. - CVE-2026-47729: out-of-bound...