PT-2026-84028

Unauthenticated Bypass Vulnerability in SiteGround Security = 1.6.6 versions...

CVE-2026-70309

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...

EUVD-2026-67853

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-83264

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description An origin validation error allows an unauthorized attacker to bypass a security feature over a network. Origin validation is a security mechanism used to verify that a...

[BSA-138] Security Update for incus

Mathias Gibbens uploaded new packages for incus which fixed the following security problems: CVE ID : CVE-2026-62313 CVE-2026-62867 CVE-2026-62940 CVE-2026-62941 CVE-2026-63125 CVE-2026-63343 CVE-2026-81493 CVE-2026-81494 CVE-2026-81495 CVE-2026-81496 CVE-2026-81497 CVE-2026-81498 CVE-2026-81499...

CVE-2026-59297

Implementation of isSecure call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses WebSphere Application Server Liberty which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Monitor component uses WebSphere Application Server Liberty which is vulnerable to CVE-2026-5516, CVE-2026-4410. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-5516 DESCRIPTION: IBM WebSphere Application...

EUVD-2026-67183

Implementation of isSecure call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

CVE-2026-59297 Spring Cloud Function can incorrectly determine if URI is secure

Implementation of isSecure call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

CVE-2026-73560

A flaw was found in vLLM, an inference and serving engine for large language models. The MiMoV2OmniMultiModalProcessor component improperly handles attacker-controlled image and audio strings, bypassing security protections. This vulnerability allows a remote attacker to perform Server-Side Reque...

Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM DevOps Code ClearCase

Summary IBM WebSphere Application Server WAS is shipped as a component of IBM DevOps Code ClearCase. Information about security vulnerabilities affecting WAS have been published in a security bulletin. CVE-2026-10842,CVE-2026-57819, CVE-2026-54225, CVE-2026-64958, CVE-2026-14981, CVE-2026-15064,...

EUVD-2025-210804

HCL Connections is vulnerable to server-side request forgery SSRF when an internal server is compromised possibly allowing an attacker to send unauthorized requests in certain scenarios leading to information disclosure or security bypass...

PT-2026-82705

Implementation of isSecure call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

CVE-2025-62341

HCL Connections is vulnerable to server-side request forgery SSRF when an internal server is compromised possibly allowing an attacker to send unauthorized requests in certain scenarios leading to information disclosure or security bypass...

CVE-2025-62341 HCL Connections is vulnerable to server-side request forgery (SSRF)

HCL Connections is vulnerable to server-side request forgery SSRF when an internal server is compromised possibly allowing an attacker to send unauthorized requests in certain scenarios leading to information disclosure or security bypass...

CVE-2025-62341 HCL Connections is vulnerable to server-side request forgery (SSRF)

HCL Connections is vulnerable to server-side request forgery SSRF when an internal server is compromised possibly allowing an attacker to send unauthorized requests in certain scenarios leading to information disclosure or security bypass...

CVE-2025-62341

HCL Connections contains a server-side request forgery (SSRF) vulnerability that becomes exploitable when an internal server is compromised. In certain scenarios, an attacker can send unauthorized requests, potentially leading to information disclosure or security bypass . The CVSS 3.1 base score...

CVE-2026-79190

A flaw was found in Extensions in Google Chrome. A remote attacker, after compromising the renderer process, could exploit incorrect authorization to bypass the web origin policy via a crafted HTML page. This could allow the attacker to circumvent security restrictions, potentially leading to...

EUVD-2026-66608

NebulaGraph exposes its runtime configuration over an unauthenticated HTTP service. Each daemon starts the web service defined in src/webservice/WebService.cpp, whose bind address defaults to all interfaces, and registers routes for reading and writing gflags alongside status and statistics...

CVE-2026-55618

A flaw was found in emlparser, a Python module for parsing email files. The cleanfounduri function incorrectly validates Uniform Resource Locator URL strings by processing them before unescaping HTML entities. This allows a remote attacker to craft malicious URLs using HTML entities that are then...