Chromium: CVE-2026-17799 Insufficient validation of untrusted input in Safe Browsing

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-43832

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-63223

CodeIgniter (PHP framework) prior to version 4.7.4 is affected by an upload validation bypass in the is_image and mime_in rules. If an application preserves the client-supplied filename and stores uploads in a web-accessible, script-enabled directory, a remote attacker could upload executable con...

CVE-2026-43832 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

EUVD-2026-51389

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43832

CVE-2026-43832 involves a stack-based buffer overflow in the Cookie parsing methods of an unspecified software product. Successful exploitation could allow an unauthenticated attacker to conduct code execution when the SafeEnhancement feature is enabled. Specific details regarding the affected ve...

CVE-2026-43829

CVE-2026-43829 describes a stack-based buffer overflow within the password functionality of an unspecified software component. Successful exploitation could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled. While most documents state that ful...

EUVD-2026-51385

Full details and mitigation steps are currently restricted and will be published at a later date...

SUSE CVE-2026-17799

Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a malicious file. Chromium security severity: Medium...

PT-2026-66674

Successful exploitation of the vulnerability could allow an unauthenticated attacker to exploit a stack-based buffer overflow in the Cookie parsing methods to conduct code execution when the SafeEnhancement feature is enabled...

PT-2026-66671

Successful exploitation of the vulnerability could allow an unauthenticated attacker to exploit a stack-based buffer overflow in the password functionality to conduct code execution when the SafeEnhancement feature is enabled...

📄 Trilium Notes 0.102.1 Remote Code Execution

A proof of concept exploit for Trilium Notes TriliumNext versions 0.102.1 and earlier that contain a remote code execution vulnerability. The exploit imports a crafted Trilium export archive that bypasses the application's safe import protections through a path traversal and stored cross site...

The vulnerability of the SAFE_FOR_TEMPLATES() function in the JavaScript library for safe cleaning and protection of HTML code by DOMPurify, allowing attackers to execute arbitrary code.

The vulnerability of the SAFEFORTEMPLATES function in the JavaScript library for safe cleaning and protection of DOMPurify’s HTML code is related to the lack of protective measures for website structures. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2026-17799

An insufficient validation of untrusted input flaw was found in the Safe Browsing component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514461031...

CVE-2026-15969

SGLang contains an unauthenticated RCE in /loadloraadapterfromtensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads...

EUVD-2026-51267

SGLang contains an unauthenticated RCE in /loadloraadapterfromtensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads...

CVE-2026-15969 CVE-2026-15969

SGLang contains an unauthenticated RCE in /loadloraadapterfromtensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads...

CVE-2026-15969 CVE-2026-15969

SGLang contains an unauthenticated RCE in /loadloraadapterfromtensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads...

CVE-2026-67346

Swarms through 6.8.1, fixed in commit 8b0fc9e, contains a server-side request forgery vulnerability in the issafeurl function that fails to validate hostnames through DNS resolution, allowing attackers to bypass the blocklist. Attackers can supply user-controlled image or audio URLs that resolve ...

Security Bulletin: IBM Quantum Safe Explorer is affected by a security vulnerability (CVE-2026-55602)

Summary A security vulnerability was found in the dependent open source libraries used in IBM Quantum Safe Explorer code base. IBM Quantum Safe Explorer has addressed the vulnerability by updating the versions of the affected libraries. Vulnerability Details CVEID:CVE-2026-55602 DESCRIPTION:...