CVE-2026-95382

Improper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95382

Improper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95382

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a Medium severity security flaw caused by improper input validation in the Auth component. A remote attacker who has successfully compromised the renderer process can use social engineering to trick a user into visiting a crafted HTM...

EUVD-2026-89071

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - EventBus Extension allows Excavation. This issue affects Mediawiki - EventBus Extension: 1.47.0-alpha...

USN-8846-1: libheif vulnerabilities

Yuqi Qiu and Xiang Li discovered that libheif incorrectly handled certain compressed metadata. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. CVE-2026-84384 Yuqi Qiu and Xiang Li discovered that libheif...

CVE-2026-22101 Sensitive information leak through hidden menu

The access to the service menu is obfuscated, but possible with only physical access. This menu exposes sensitive information such as serial numbers, MAC addresses, and WiFi network and password...

CVE-2026-86450

Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Company DetaWix Mobile Web Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects DetaWix Mobile Web Portal: before v1.0.19...

CVE-2026-86450 Sensitive Data Exposure in Parla Auto's DetaWix Mobile Web Portal

Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Company DetaWix Mobile Web Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects DetaWix Mobile Web Portal: before v1.0.19...

CVE-2026-86450

The DetaWix Mobile Web Portal by Parla Auto Automotive Trading Limited Company is vulnerable to a Sensitive Data Exposure issue in versions before v1.0.19 . This vulnerability allows for Accessing Functionality Not Properly Constrained by ACLs , which can result in the exposure of sensitive infor...

CVE-2026-86450 Sensitive Data Exposure in Parla Auto's DetaWix Mobile Web Portal

Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Company DetaWix Mobile Web Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects DetaWix Mobile Web Portal: before v1.0.19...

EUVD-2026-88959

Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Company DetaWix Mobile Web Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects DetaWix Mobile Web Portal: before v1.0.19...

CVE-2026-76114

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Cleartext Transmission of Sensitive Information vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

EUVD-2026-88760

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Cleartext Transmission of Sensitive Information vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-76114

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Cleartext Transmission of Sensitive Information vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-76114

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to a Cleartext Transmission of Sensitive Information vulnerability. An unauthenticated attacker with remote access could exploit this flaw to cause Information disclosure . No specific exploit details or ...

WordPress BackupEase plugin <= 2.2.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin BackupEase versions = 2.2.2...

WordPress StifLi Backup Tools plugin <= 2.2.7 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin StifLi Backup Tools versions = 2.2.7...

EUVD-2026-88690

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper...

Insufficient Technical Documentation

Apache Tomcat is vulnerable to Insufficient Technical Documentation. The vulnerability is due to insufficient security configuration guidance, which could allow an administrator to deploy Tomcat with an insecure EncryptInterceptor configuration and potentially expose protected cluster communicati...

Anjvision YSSD-RTMP-H5

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information, access user accounts, execute OS-level commands, or take full control over the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the...