CVE-2026-105919: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysqlquery of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password result...

PT-2026-106319

Name of the Vulnerable Software and Affected Versions SourceCodester Drug Recommendation System version 1.0 Description A security flaw allows remote attackers to perform cross site scripting XSS, a technique where malicious scripts are injected into trusted websites, via an unknown function with...

Command Injection vulnerability exists in Brocade Fabric OS REST API management interface

: A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters...

CVE-2026-106294: Incomplete Cleanup

Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

CVE-2026-106397: Incorrect Authorization

Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106229: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106285: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106299: Improper Input Validation

Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106427: Unintended Proxy or Intermediary

Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...

PT-2026-106969

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 155.0.8059.39 Description Improper privilege management in the user interface allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a...

PT-2026-106972

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper input validation in WebAudio allows a remote attacker who has compromised the renderer process to bypass system access restrictions through a crafted HTML page. Recommendations...

PT-2026-106967

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incomplete cleanup in Chromoting on Mac allows a remote attacker to bypass system access restrictions by sending crafted network traffic. Recommendations Update to version 155.0.8059.39...

PT-2026-106958

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description UI misrepresentation in WebAppInstalls allows a remote attacker to bypass system access restrictions through the use of a crafted HTML page and social engineering. Recommendations Updat...

CVE-2026-106195: Incorrect Authorization

Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

PT-2026-107099

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 155.0.8059.39 Description A confused deputy issue allows a remote attacker to bypass system access restrictions to reach a privileged page by using a crafted HTML page. Recommendations Update to version...

PT-2026-107035

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in FullScreen allows a remote attacker who has compromised the renderer process and used social engineering to bypass system access restrictions through a crafted...

PT-2026-106998

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 155.0.8059.39 Description A confused deputy issue in the user interface allows a local attacker to bypass system access restrictions to reach a privileged page. This is achieved through a co-installed...

PT-2026-106860

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper input validation in Viz allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page. Recommendations...

PT-2026-107057

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A race condition exists in Chromoting, which could allow a remote attacker to bypass system access restrictions through the use of crafted network traffic and social engineering. A race...

PT-2026-107076

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in FontAccess allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page. Recommendation...