ROS-20260915-73-0104

The vulnerability of the Wallet component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially crafted HTML page...

CVE-2026-47780: Improper Input Validation

free5GC is an open-source implementation of the 5G core network. In 4.2.3 and earlier, HandleCreateEeSubscriptions and HandleQueryeesubscriptions in free5gc/udr internal/sbi/apidatarepository.go validate the ueId path value with a regular expression whose final .+ alternative accepts every...

PT-2026-92148

Name of the Vulnerable Software and Affected Versions IBM Verify Identity Access affected versions not specified Description Improper validation of user supplied input could allow an administrator to execute additional commands they are not entitled to. Recommendations At the moment, there is no...

CVE-2026-44300: Improper Input Validation

OpenCost provides cost monitoring for Kubernetes workloads and cloud costs. Prior to 1.121.0, the POST /serviceKey endpoint in pkg/costmodel/router.go allows a network client to invoke AddServiceKey without mandatory authentication and submit an arbitrary key form value that is written to the GCP...

ROS-20260915-73-0067

The vulnerability of the TabGroups function in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to replace the user interface through malicious network traffic...

CVE-2026-19655: Improper Input Validation

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol DHCP relay/snooping configured with the information option Option 82, or with the DHCP server configured with match criteria based on the information option, an unauthenticated attacker connected to a client-facing...

PT-2026-92296

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An out-of-bounds write exists in the printf function within the printf.c file due to improper input validation. This flaw allows for local escalation of...

PT-2026-92191

pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must...

ROS-20260915-73-0125

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

PT-2026-92330

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An out-of-bounds write can occur in the Start function of AudioRtpPayloadEncoderNode.cpp due to improper input validation. This issue may allow remote code...

CVE-2026-91738: Improper Input Validation

Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

ROS-20260915-73-0193

The vulnerability of the New Tab Page component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity through a specially created HTML page...

ROS-20260915-73-0068

The vulnerability of the API for working with foldable devices involves insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing security mechanisms remotely...

CVE-2026-79410: Improper Input Validation

Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated attackers to reduce their order total below the legitimate price of shippable goods...

CVE-2026-56831: Improper Input Validation

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.0, the /cpanel/discounts administrative interface accepts negative fixedamount discount values, persists them in shdiscounts, and passes them through vendor/shopper/cart/src/Discounts/DiscountCalculator.php and...

PT-2026-92312

Name of the Vulnerable Software and Affected Versions VPU affected versions not specified Description Improper input validation in VPU allows for a shared memory overwrite. This issue can lead to local escalation of privilege, granting the attacker System execution privileges without requiring us...

ROS-20260915-73-0155

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20260915-73-0003

The vulnerability of the Password Manager component in Google Chrome and Microsoft Edge browsers is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

PT-2026-91847

Improper input validation vulnerability in bizwell xClick allows Stored XSS. This issue affects xClick: R2, R3, and R3.1...

ROS-20260915-73-0200

The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...