114256 matches found
CVE-2026-81535: Missing Authorization
In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen in src/internal.c gates only direct-tcpip channel opens with the forwarding policy callback. forwarded-tcpip opens are admitted without an authorization check and are not capped in number, allowing a malicious SSH peer to make an...
PT-2026-107493
Name of the Vulnerable Software and Affected Versions smart proxy dynflow affected versions not specified Description Missing authentication exists in remote-execution task updates within the smart proxy dynflow package. When remote execution is configured in pull or pull-mqtt mode, the progress...
Linux Distros Unpatched Vulnerability : CVE-2026-106369
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Translate in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site...
Linux Distros Unpatched Vulnerability : CVE-2026-106225
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive informatio...
Linux Distros Unpatched Vulnerability : CVE-2026-106340
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via...
Linux Distros Unpatched Vulnerability : CVE-2026-106365
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromi...
Linux Distros Unpatched Vulnerability : CVE-2026-106362
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy vi...
CVE-2026-62253: Missing Authentication for Critical Function
Homer is open source telecom observability software. Prior to version 11.0.283, both JWT middleware functions JWTMiddleware and JWTMiddlewareV4 immediately return nextc when jwtSecret == "". The JWT secret defaults to an empty string. On a default installation, all protected API endpoints under...
Linux Distros Unpatched Vulnerability : CVE-2026-106384
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site...
Linux Distros Unpatched Vulnerability : CVE-2026-106367
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially...
CVE-2026-106194
Missing authorization in WebAppInstalls in Google Chrome prior to 155...
Linux Distros Unpatched Vulnerability : CVE-2026-106406
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements v...
CVE-2026-106369
Missing authorization in Translate in Google Chrome prior to 155.0.805...
Linux Distros Unpatched Vulnerability : CVE-2026-106344
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged...
CVE-2026-106271
Missing authorization in Workers in Google Chrome prior to 155.0.8059...
Oracle Linux 9 : rust-rpm-sequoia (ELSA-2026-76733)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-76733 advisory. 1.10.2.1-1 - Rebase to 1.10.2 and sequioa-openpgp with fixes for CVE-2026-42784 Tenable has extracted the preceding description block directly from the Oracle...
CVE-2026-103075: Missing Authorization
Missing Authorization vulnerability in WPMU DEV Hustle wordpress-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hustle: from n/a through 7.8.14.2...
CVE-2026-106384
Missing authorization in SiteIsolation in Google Chrome prior to 155.0...
