CVE-2026-17921

An insufficient validation of untrusted input flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513503197...

CVE-2026-17888

An insufficient validation of untrusted input flaw was found in the WebUI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523720529...

CVE-2026-17847

An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518243653...

CVE-2026-17821

An insufficient policy enforcement flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517597914...

CVE-2026-17854

An insufficient policy enforcement flaw was found in the WebMCP component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519500882...

CVE-2026-17824

An insufficient policy enforcement flaw was found in the ServiceWorker component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517655543...

CVE-2026-14227

An API session‑management flaw in products with the MikroTik RouterOS API enabled are vulnerable to a Insufficient Session Expiration vulnerability. This could allow active sessions to retain their previous permission set after inactivity timeouts or user‑group changes. As a result, an...

CVE-2026-14227

An API session‑management flaw in products with the MikroTik RouterOS API enabled are vulnerable to a Insufficient Session Expiration vulnerability. This could allow active sessions to retain their previous permission set after inactivity timeouts or user‑group changes. As a result, an...

CVE-2026-12942 Langflow is affected by path traversal due to multiple unauthenticated and insufficiently authorized API endpoints

IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences /.. / to view arbitrary files on the system...

CVE-2026-12945

IBM Langflow OSS 1.0.0–1.10.1 is affected by CVE-2026-12945: authenticated users can access and manipulate other users’ build jobs due to improper access control on log retrieval and unauthenticated build endpoints. Affected product: Langflow OSS (1.0.0–1.10.1). Root cause: authorization bypass t...

CVE-2026-41709

VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged...

CVE-2026-41709

Summary (CVE-2026-41709): VMware ESX contains an insufficient logging vulnerability. A malicious administrator could perform operations without being logged. The issue is listed with a CVSSv3 base score of 2.7 (Low) and is linked with patches in Broadcom’s VMSA-2026-0006. What is affected: ESX/ES...

EUVD-2026-51107

VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged...

CVE-2026-41709 ESX insufficient logging vulnerability

VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged...

CVE-2026-18002

An insufficient validation of untrusted input flaw was found in the Google Lens component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521864362...

CVE-2026-17953

An insufficient policy enforcement flaw was found in the WebView component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517335150...

CVE-2026-16970

The CVE-2026-16970 entry concerns the IRIS web application (notably version 2.4.26, and possibly others) with a logout functionality that is ineffective. This can allow stolen session cookies to be misused for an extended period. According to the provided documents, the vulnerability affects the ...

CVE-2026-16970 DFIR-IRIS Insufficient Logout Implementation

The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time...

CVE-2026-17773

An insufficient validation of untrusted input flaw was found in the Cast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513232523...

CVE-2026-17794

An insufficient validation of untrusted input flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514067070...