CVE-2026-82211: Missing Authorization

The Nexi XPay Build WordPress plugin through 7.6.2 does not verify the payment result supplied to several of its unauthenticated routes, allowing attackers to mark arbitrary orders as paid or failed, to cancel them, and to obtain order keys which expose guest buyers' details...

CVE-2026-107206: Missing Authentication for Critical Function

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration...

Linux Distros Unpatched Vulnerability : CVE-2026-106208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a...

Linux Distros Unpatched Vulnerability : CVE-2026-106271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site...

Linux Distros Unpatched Vulnerability : CVE-2026-106410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI...

CVE-2026-106271

Missing authorization in Workers in Google Chrome prior to 155.0.8059...

Linux Distros Unpatched Vulnerability : CVE-2026-106267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site...

Linux Distros Unpatched Vulnerability : CVE-2026-106362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy vi...

CVE-2026-27434: Missing Authorization

Missing Authorization vulnerability in sc Internet Vivoo WP Rentals wprentals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rentals: from n/a through 3.14.2...

CVE-2026-106198

Missing authorization in FileSystem in Google Chrome prior to 155.0.80...

CVE-2026-106289

Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39...

CVE-2026-106312

Missing authorization in SignIn in Google Chrome prior to 155.0.8059.3...

CVE-2026-106344

Missing authorization in Permissions in Google Chrome prior to 155.0.8...

CVE-2026-106388

Missing authorization in DataTransfer in Google Chrome prior to 155.0...

CVE-2026-106194

Missing authorization in WebAppInstalls in Google Chrome prior to 155...

CVE-2026-106217

Missing authorization in Google Lens in Google Chrome prior to 155.0.8...

CVE-2026-106363

Missing authorization in FullScreen in Google Chrome prior to 155.0.80...

CVE-2026-106369

Missing authorization in Translate in Google Chrome prior to 155.0.805...

Linux Distros Unpatched Vulnerability : CVE-2026-106406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements v...

Linux Distros Unpatched Vulnerability : CVE-2026-106418

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via...