CVE-2026-16387

Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16387

A site isolation issue exists in the Networking component of the Firefox web browser and Thunderbird mail client. This vulnerability was addressed in Firefox 153 , Firefox ESR 140.13 , and Thunderbird 153 (including Thunderbird 140.13 ). Exploitation details are not provided in the documentation....

CVE-2026-16358 Site isolation issue in the Graphics: WebRender component

Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16358

Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16358

Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16358

Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

EUVD-2026-46216

Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

CVE-2026-16358

A site isolation issue exists in the Graphics: WebRender component of the Mozilla Firefox and Thunderbird browsers. This vulnerability has been addressed in Firefox versions 153 , ESR 115.38 , and ESR 140.13 , as well as Thunderbird versions 153 and 140.13 . While specific exploitation details or...

CVE-2026-16375

Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16375 Site isolation issue in the Networking: HTTP component

Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

EUVD-2026-46211

Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

CVE-2026-16375 Site isolation issue in the Networking: HTTP component

Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16375

Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16375

The Networking: HTTP component in Mozilla Firefox and Mozilla Thunderbird is affected by a site isolation issue (CVE-2026-16375). The vulnerability has been resolved in Firefox 153 , Firefox ESR 140.13 , and Thunderbird 153 (including Thunderbird 140.13 ). For Amazon Linux 2 , the fix is availabl...

CVE-2026-16375

Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

Rockwell Automation 1718-AENTR/1719-AENTR

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow for an attacker to cause a denial-of-service condition on the product. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network...

CVE-2026-28378

A flaw in Grafana's public dashboard deletion endpoint lacks organization isolation, allowing an Organization Administrator to delete public dashboards in other organizations using the target dashboard's ID. Mitigation Since this vulnerability only affects the Public Dashboards feature,...

PT-2026-61937

Name of the Vulnerable Software and Affected Versions Microsoft Azure API Management versions prior to 2025-10-17 Description When self-service signup using username and password Basic Authentication is enabled in one tenant, an attacker can reuse the registration flow to target another tenant by...

CVE-2026-47399: Improper Access Control

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior to version 0.1.4, the workspace-scoped REST routes contain a systemic object-level authorization flaw that allows an authenticated user from one workspace to access, modify, and delete objects belonging to...

PT-2026-61911

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description A site isolation issue exists within the DOM Navigation component. Site isolation is a security mechanism that ensures web pages from different sites are processed in...