CVE-2026-106206

An improper input validation flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517374100...

CVE-2026-106185

An improper input validation flaw was found in the Viz component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/502462485...

OPENSUSE-SU-2026:22080-1 Security update for squid

This update for squid fixes the following issues: - CVE-2026-32748: denial of service in ICP Request handling bsc1260453. - CVE-2026-33515: out of bounds read in ICP message handling bsc1260454. - CVE-2026-33526: denial of service in ICP Request handling bsc1260452. - CVE-2026-47729: out-of-bound...

SUSE-SU-2026:24224-1 Security update for squid

This update for squid fixes the following issues: - CVE-2026-32748: denial of service in ICP Request handling bsc1260453. - CVE-2026-33515: out of bounds read in ICP message handling bsc1260454. - CVE-2026-33526: denial of service in ICP Request handling bsc1260452. - CVE-2026-47729: out-of-bound...

CVE-2026-103413

Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...

CVE-2026-103413 Apache Camel Karavan: unvalidated Kubernetes resources applied from a project's kubernetes.yaml

Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...

EUVD-2026-95757

Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...

CVE-2026-103413

Apache Camel Karavan versions 4.0.0 through 4.22.0 are vulnerable to an improper input validation flaw during deployment. The software unmarshals a project's kubernetes.yaml and applies all contained resources to the cluster without restricting resource kinds, rejecting security-sensitive pod opt...

CVE-2026-103413 Apache Camel Karavan: unvalidated Kubernetes resources applied from a project's kubernetes.yaml

Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...

BIT-GHOST-2026-103278 Ghost 5.8.0 before 6.34.0 Staff Account Takeover via Admin iframe

Ghost versions 5.8.0 before 6.34.0 contain an input validation vulnerability in the admin iframe that allows attackers to take over staff user accounts. Attackers with content publishing privileges can craft malicious pages that, when visited by active staff users, enable account takeover through...

CVE-2026-106491

A flaw was found in the Backstage plugin-proxy-backend component. An authenticated remote attacker can exploit improper input validation by submitting a specially crafted request URL to the proxy backend. This causes the proxy service to forward requests to endpoints outside the configured base...

Improper Input Validation

Hazelcast is vulnerable to Improper Input Validation. The vulnerability is due to improper validation of data supplied by a malicious client connected to the cluster, which allows an attacker to read arbitrary memory from a cluster member, crash the member, or potentially corrupt memory and execu...

CLEANSTART-2026-EM71520 Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses

Security vulnerability affects the apache2 package. Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses...

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

Apache Tomcat Data Compromise

The vulnerability of the Apache Tomcat application server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

Cisco Application Policy Infrastructure Controller Security Hardening Release: October 2026 (cisco-sa-hardening-apic-UOXWtfh)

According to its self-reported version, Cisco Application Policy Infrastructure Controller APIC is affected by multiple vulnerabilities. - An input validation vulnerability exists in Cisco Application Policy Infrastructure Controller APIC due to improper neutralization of user-supplied input. An...

ROS-20261009-73-0024

The vulnerability of the net/core/dev.ct module in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20261009-73-0112

The vulnerability of the l2tpxmitcore function in the net/l2tp/l2tpcore.c module, which is part of the Linux L2TP protocol implementation, is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-107825: Improper Input Validation

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, ProcessURI in internal/corazawaf/transaction.go handles a url.ParseRequestURI failure by retaining the raw URI but leaving QUERYSTRING, ARGSGET, ARGSGETNAMES, and the GET-derived portion ...

CVE-2026-103413: Improper Input Validation

Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...