Rocky Linux 9.6 [TuxCare] Security Update: ignition / ignition-edge / ignition-grub / ignition-validate (ALMALINUX9.6:CLSA-2026:1791487723)

"The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791487723 advisory. - gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input...

Content Credentials SDK Insufficient Validation

The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions remotely...

Cisco Meraki Data Compromise

The vulnerability of Cisco Meraki network device software-related microprograms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of protected information...

Content Credentials SDK Insufficient Validation

The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to bypass security restrictions remotely...

Content Credentials SDK Insufficient Validation DoS

The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2026-21130: Improper Input Validation

Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges...

PT-2026-110453

Name of the Vulnerable Software and Affected Versions libsimba.heifdec.media.samsung.so versions prior to SMR Oct-2026 Release 1 Description Improper input validation occurs during the parsing of sheifd, which may allow a local attacker to execute arbitrary code. Recommendations Update...

Improper Input Validation

Bouncy Castle for Java is vulnerable to Improper Input Validation. The vulnerability is due to the MTI/A0 Diffie-Hellman agreement process exponentiating unvalidated peer-supplied values without range or subgroup-membership checks, which allows a malicious peer to recover the local static private...

FLIR AX8 1.46.16 - Remote Command Injection

FLIR AX8 version 1.46.16 and below is susceptible to an unauthenticated remote command injection vulnerability.The vulnerability exists in the alarm functionality where user-supplied input in the 'id' parameter is not properly sanitized,allowing attackers to inject and execute arbitrary OS...

CVE-2026-106263

An improper input validation flaw was found in the SignIn component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553149001...

CVE-2026-106226

An improper input validation flaw was found in the Compositing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/520573237...

CVE-2026-106206

An improper input validation flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517374100...

CVE-2026-106185

An improper input validation flaw was found in the Viz component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/502462485...

CVE-2026-103413

Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...

EUVD-2026-95757

Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...

CVE-2026-103413 Apache Camel Karavan: unvalidated Kubernetes resources applied from a project's kubernetes.yaml

Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...

CVE-2026-103413 Apache Camel Karavan: unvalidated Kubernetes resources applied from a project's kubernetes.yaml

Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...

CVE-2026-103413

Apache Camel Karavan versions 4.0.0 through 4.22.0 are vulnerable to an improper input validation flaw during deployment. The software unmarshals a project's kubernetes.yaml and applies all contained resources to the cluster without restricting resource kinds, rejecting security-sensitive pod opt...

BIT-GHOST-2026-103278 Ghost 5.8.0 before 6.34.0 Staff Account Takeover via Admin iframe

Ghost versions 5.8.0 before 6.34.0 contain an input validation vulnerability in the admin iframe that allows attackers to take over staff user accounts. Attackers with content publishing privileges can craft malicious pages that, when visited by active staff users, enable account takeover through...

CVE-2026-106491

A flaw was found in the Backstage plugin-proxy-backend component. An authenticated remote attacker can exploit improper input validation by submitting a specially crafted request URL to the proxy backend. This causes the proxy service to forward requests to endpoints outside the configured base...