CVE-2026-100297 Server-Side request forgery (SSRF) in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This may expose internal information or leak data via DNS queries...

CVE-2026-76730

An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs due to improper packet handling. This flaw allows an unauthenticated adjacent attacker to circumvent existing authentication controls and send unauthorized network traffic to the target device. Spe...

CVE-2026-76730 Improper PAPI Packet handling leads to unauthorized access in HPE Networking Instant ON APs

An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to circumvent certain existing authentication...

EUVD-2026-89349

An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to circumvent certain existing authentication...

CVE-2026-76726 Authentication Bypass Leading to Unauthorized Network Access in HPE Networking Instant ON API Endpoint

An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated remote attacker to bypass network access controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to obtain...

CVE-2026-76726

An authentication bypass vulnerability exists in the API endpoint of HPE Networking Instant ON . An unauthenticated remote attacker could bypass network access controls, provided certain preconditions outside of the attacker's control are met. Successful exploitation may result in unauthorized ac...

CVE-2026-76726 Authentication Bypass Leading to Unauthorized Network Access in HPE Networking Instant ON API Endpoint

An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated remote attacker to bypass network access controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to obtain...

CVE-2026-97476

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. An unprivileged local attacker can exploit this vulnerability to cause information disclosure across isolated network environments. Because socket inspection handlers do not filter connection and socket lists by the...

DEBIAN-CVE-2026-95376

Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

CVE-2026-95374

Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95376

Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

DEBIAN-CVE-2026-95374

Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-95346

UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via crafted network traffic. Chromium security severity: Medium...

CVE-2026-95333

Use after free in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-95305

UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...

DEBIAN-CVE-2026-95305

UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...

DEBIAN-CVE-2026-95292

Incorrect authorization in Safebrowsing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

CVE-2026-95341

Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-95346

UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via crafted network traffic. Chromium security severity: Medium...

CVE-2026-95374

Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...