PT-2026-66066

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the Payments component allows a remote attacker who has compromised the renderer process to perform UI spoofing by using a craft...

PT-2026-66094

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the 'PresentationAPI' allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. Cross-origin data leakage occurs when...

PT-2026-66131

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the DigitalCredentials component allows a remote attacker to perform UI spoofing by using a crafted HTML page. Recommendations Update Google Chrome to...

PT-2026-66111

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the Credential Management component allows a remote attacker to perform UI spoofing by using a crafted HTML page. Recommendations Update Google Chrome...

Linux kernel HID ALPS Buffer Overflow

The vulnerability of the alpsrawevent function in the drivers/hid/hid-alps.c module of the Linux kernel subsystem for user interface devices relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

RHEL 9 : golang (RHSA-2026:47712)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47712 advisory. The golang packages provide the Go programming language compiler. Security Fixes: crypto/tls: Unexpected session resumption in crypto/tls...

PT-2026-66302

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in Global Media Controls allows a remote attacker to perform UI spoofing via a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-66575

Name of the Vulnerable Software and Affected Versions Spikster versions prior to commit e1cdf8c Description A missing authentication flaw allows unauthenticated remote attackers to access all API routes. This occurs because the CipiAuth middleware is registered but not applied to any route within...

PT-2026-66190

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-17747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Payments in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the...

PT-2026-66478

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator versions 6.2.2.0 through 6.2.2.0 1 IBM Sterling File Gateway versions 6.2.2.0 through 6.2.2.0 1 Description An authenticated user can embed arbitrary JavaScript code in the Web UI. This cross-site scripting issue...

Debian dla-4706 : ruby-rack - security update

The remote Debian 11 / 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4706 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4706-1 [email protected]...

PT-2026-66615

Name of the Vulnerable Software and Affected Versions RCU II+ affected versions not specified Multiload II+ affected versions not specified Description An unauthenticated service exposes a debug interface that grants full root-level access to the embedded system. This issue is caused by a...

PT-2026-66500

Name of the Vulnerable Software and Affected Versions foreUP affected versions not specified Description A flaw in the customer REST API allows any authenticated user to retrieve cleartext payment-processor merchant credentials within the response body. Recommendations At the moment, there is no...

Devolutions Server 2026.1.x < 2026.1.24.0 / 2026.2.x < 2026.2.14.0 Multiple Vulnerabilities (DEVO-2026-0026)

The version of Devolutions Server installed on the remote host is prior or equal to 2026.1.23.0 or 2026.2.4.0 through 2026.2.12.0. It is, therefore, affected by multiple vulnerabilities, including: - Improper access control in the role membership management endpoint in Devolutions Server allows a...

PT-2026-66454

Name of the Vulnerable Software and Affected Versions Eaton Tripp Lite Series PADM firmware affected versions not specified Description Improper input validation in a session management interface allows an authenticated administrator to execute arbitrary commands within a restricted environment...

golang: cmd/compile: no-op interface conversion bypasses overlap checking

A flaw was found in the cmd/compile package in the Go standard library. A no-op interface conversion prevented the compiler from correctly identifying non-overlapping memory moves. As a result, the compiler allows unsafe memory move operations to occur at runtime, potentially causing data...

CVE-2026-67437

OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the service/internal/auth/otoauth2/restapiauthoauth2.go OAuth2 login handler stores per-login state in the registeredStates map on every /oauth/login request without expiring, deleting, or...

golang: cmd/compile: no-op interface conversion bypasses overlap checking

A flaw was found in the cmd/compile package in the Go standard library. A no-op interface conversion prevented the compiler from correctly identifying non-overlapping memory moves. As a result, the compiler allows unsafe memory move operations to occur at runtime, potentially causing data...

CVE-2026-13306

Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authentication on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this vulnerability. The...