CVE-2026-106191

Missing authorization in Actor in Google Chrome prior to 155.0.8059.39...

CVE-2026-106183

Missing authorization in Chromoting in Google Chrome on on Windows pri...

CVE-2026-106208

Missing authorization in API in Google Chrome prior to 155.0.8059.39 a...

CVE-2026-106224

Missing authorization in Google Lens in Google Chrome prior to 155.0.8...

CVE-2026-106194

Missing authorization in WebAppInstalls in Google Chrome prior to 155...

CVE-2026-106205

Missing authorization in Passwords in Google Chrome on on Android prio...

CVE-2026-106225

Missing authorization in Autofill in Google Chrome prior to 155.0.8059...

CVE-2026-106250

Missing authorization in Actor in Google Chrome prior to 155.0.8059.39...

CVE-2025-70520

The websocket handler in Fanvil x7a firmware version 2.6.0.1182 fails to enforce proper authentication restrictions against sessionless users . This vulnerability allows unauthorized individuals to view device resources , including operational logs , or perform diagnostic requests . No specific r...

CVE-2026-106369

Missing authorization in Translate in Google Chrome prior to 155.0.805...

CVE-2026-96335: Missing Authorization

Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Forminator: from n/a through 1.57.2...

PT-2026-107650

Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Forminator: from n/a through 1.57.2...

CVE-2026-103075: Missing Authorization

Missing Authorization vulnerability in WPMU DEV Hustle wordpress-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hustle: from n/a through 7.8.14.2...

CVE-2026-107205: Missing Authentication for Critical Function

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess coordinator that allows remote unauthenticated attackers to access its HTTP fleet control API listening on all interfaces by default. Attackers can register or deregister instances via /instances, overwrite...

Linux Distros Unpatched Vulnerability : CVE-2026-106425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in BrowserTag in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged...

Linux Distros Unpatched Vulnerability : CVE-2026-106340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via...

Linux Distros Unpatched Vulnerability : CVE-2026-106208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a...

Linux Distros Unpatched Vulnerability : CVE-2026-106187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI...

Linux Distros Unpatched Vulnerability : CVE-2026-106365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromi...

Linux Distros Unpatched Vulnerability : CVE-2026-106387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive...