CVE-2026-51956

A Broken Object Level Authorization vulnerability exists in Grashjs Atlas CMMS prior to v1.6.0. An authenticated user from one tenant can read and modify another tenant's company record by changing only the numeric ID in the /company/id endpoint. The application does not enforce tenant-level...

PT-2026-84517

Name of the Vulnerable Software and Affected Versions Ansible Automation Platform automation-controller AWX affected versions not specified Description An authorization flaw exists in the Bulk Job Launch API endpoint 'POST /api/v2/bulk/job launch/'. The system performs only a read-level permissio...

CVE-2026-76851: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed remote code execution on the instance. Insufficient network isolation allowed malicious pre-receive hook code to impersonate an internal service and redirect trusted internal requests to a...

CVE-2026-84140: Origin Validation Error

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84133: Origin Validation Error

Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84129: Origin Validation Error

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

PT-2026-84532

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.22 Description A Server-Side Request Forgery SSRF issue exists where insufficient network isolation allows malicious pre-receive hook code to impersonate an internal service. This enables the...

PT-2026-84186

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 153.2 Description A site isolation issue exists within the DOM: Push Subscriptions component. Site isolation is a...

PT-2026-84182

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 153.2 Description A site isolation issue exists within the DOM Navigation component. Site isolation is a security...

CVE-2026-84199: Server-Side Request Forgery (SSRF)

Kyverno before 1.16.2 contains a server-side request forgery SSRF vulnerability in the APICall feature. The URL field in a Policy's ServiceCall configuration is not validated, so a user with namespace-level Policy creation permissions can direct Kyverno to make HTTP requests to arbitrary internal...

PT-2026-84160

Kyverno before 1.16.2 contains a server-side request forgery SSRF vulnerability in the APICall feature. The URL field in a Policy's ServiceCall configuration is not validated, so a user with namespace-level Policy creation permissions can direct Kyverno to make HTTP requests to arbitrary internal...

ASB-A-466379087

In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-84470: Missing Authorization

A flaw was found in Ansible Automation Platform's automation-controller AWX. The Bulk Job Launch API POST /api/v2/bulk/joblaunch/ authorizes the requested instancegroups with only a read-level permission check, whereas the standard single-job launch path requires use-level permission on the same...

MiracleLinux 9 : firefox-140.14.0-1.el9_8.ML.1 (AXSA:2026-1727:22)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1727:22 advisory. firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component CVE-2026-74983 firefox: thunderbird: Site isolation issue in the...

Updated nspr, nss, & firefox packages fix security vulnerabilities

Site isolation issue in the Graphics: CanvasWebGL component. CVE-2026-74934 Privilege escalation in the DOM: Networking component. CVE-2026-74935 Use-after-free in the JavaScript: WebAssembly component. CVE-2026-74936 Use-after-free in the JavaScript: GC component. CVE-2026-74937 Mitigation bypas...

Updated thunderbird packages fix security vulnerabilities

Site isolation issue in the Graphics: CanvasWebGL component. CVE-2026-74934 Privilege escalation in the DOM: Networking component. CVE-2026-74935 Use-after-free in the JavaScript: WebAssembly component. CVE-2026-74936 Use-after-free in the JavaScript: GC component. CVE-2026-74937 Mitigation bypas...

MGASA-2026-0346 Updated thunderbird packages fix security vulnerabilities

Site isolation issue in the Graphics: CanvasWebGL component. CVE-2026-74934 Privilege escalation in the DOM: Networking component. CVE-2026-74935 Use-after-free in the JavaScript: WebAssembly component. CVE-2026-74936 Use-after-free in the JavaScript: GC component. CVE-2026-74937 Mitigation bypas...

MGASA-2026-0345 Updated nspr, nss, & firefox packages fix security vulnerabilities

Site isolation issue in the Graphics: CanvasWebGL component. CVE-2026-74934 Privilege escalation in the DOM: Networking component. CVE-2026-74935 Use-after-free in the JavaScript: WebAssembly component. CVE-2026-74936 Use-after-free in the JavaScript: GC component. CVE-2026-74937 Mitigation bypas...

SUSE-SU-2026:23411-1 Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen

This update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.1.0 ESR. Fixed: Various security fixes. MFSA 2026-77 bsc1274867: CVE-2026-74934 Site isolation issue in the Graphics: CanvasWebGL...

OPENSUSE-SU-2026:21713-1 Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen

This update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.1.0 ESR. Fixed: Various security fixes. MFSA 2026-77 bsc1274867: CVE-2026-74934 Site isolation issue in the Graphics: CanvasWebGL...