CVE-2026-18705

An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is due to insufficient handling of certain user-supplied fields when constructin...

EUVD-2026-56908

An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is due to insufficient handling of certain user-supplied fields when constructin...

CVE-2026-11737

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality...

CVE-2026-19153

A flaw was found in Google Chrome. Insufficient validation of untrusted input in the Workers component could allow a remote attacker, who has already compromised the renderer process, to bypass site isolation. This could enable the attacker to access sensitive information or further compromise th...

CVE-2026-9214

The CVE-2026-9214 entry concerns NETGEAR R7000 routers. The root cause is insufficient input validation in the affected device. Affected are authenticated administrators on the local network who can tamper with router software and functionality, leading to unauthorized modifications. No exploitat...

CVE-2026-11738 Insufficient input validation in certain NETGEAR Nighthawk routers allows administrators to tamper with the device.

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality...

CVE-2026-11738

CVE-2026-11738 describes an insufficient input validation vulnerability affecting certain NETGEAR Nighthawk routers (e.g., RAXE500, RS700, R7000). It allows authenticated administrators on the local network to tamper with router software and functionality, enabling unauthorized modification. The ...

CVE-2026-11737 Some NETGEAR Nighthawk devices allow administrators to tamper with the device

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality...

CVE-2026-58231

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high...

EUVD-2026-55999

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high...

Grafana <= 6.7.1 - Cross-Site Scripting

Grafana through 6.7.1 contains an unauthenticated stored cross-site scripting vulnerability due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot...

CVE-2026-44758

SAP Manufacturing Integration and Intelligence MII allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed without sufficient validation. Successful exploitation could allow the attacker to execute arbitrary commands on the...

EUVD-2026-55861

SAP Manufacturing Integration and Intelligence MII allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed without sufficient validation. Successful exploitation could allow the attacker to execute arbitrary commands on the...

EUVD-2026-54269

Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: High...

The vulnerability of the `rdpei_server_handle_messages()` function in the `channels/rdpei/server/rdpei_main.c` file of the RDP client FreeRDP allows a attacker to trigger a service failure.

The vulnerability of the rdpeiserverhandlemessages function in the channels/rdpei/server/rdpeimain.c file of the RDP client FreeRDP is related to insufficient input validation. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2026-15644

The CVE concerns the Powerkit WordPress plugin (Powerkit – Supercharge your WordPress Site) with a Stored Cross-Site Scripting vulnerability via the 'style' shortcode attribute. Affects all versions up to 3.1.0 due to insufficient input sanitization and output escaping. Exploitation is possible b...

CVE-2026-16843

Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution...

CVE-2026-17990

An insufficient validation of untrusted input flaw was found in the WebAuthn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520018012...

CVE-2026-17991

An insufficient validation of untrusted input flaw was found in the AI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520110535...

CVE-2026-18014

An insufficient validation of untrusted input flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523248021...