CVE-2026-48058

nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, internal/web/session.go and internal/web/oidc.go set HttpOnly and SameSite=Lax on every cookie but never Secure. A single plaintext request to the origin operator on a LAN, mistyped...

Google Chrome OS ChromeVox Man-in-the-Middle Security Bypass Vulnerability

Google Chrome OS is a set of open source operating system developed by Google Google.ChromeVox is one of the voice reader. A security vulnerability exists in ChromeVox in versions of Google Chrome OS prior to 62.0.3202.74. A remote attacker can exploit the vulnerability to view or tamper with HTT...