CVE-2026-15735

The Contact Form to Any API plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cf7anyapiformfield' Post Meta in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-56722 Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URI

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, aAn attacker who controls the HTML input can bypass this restriction by embedding a target file path inside an SVG image delivered through a data: URI, because dompdf processes the SVG twice and the second pass does not...

CVE-2026-16107

Summary: IBM TS4500 CLI tool (versions 0.1.31–1.12.0.0) does not validate TLS server certificates, enabling potential MitM information disclosure. Root cause: improper TLS certificate validation in the CLI component. Impact: exposure of sensitive information under network attack. Affected product...

CVE-2026-50735

pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol messages before copying them, resulting in an out-of-bounds read. A party acting as the publisher for a subscription, for example a non-PostgreSQL endpoint that speaks the pglogic...

CVE-2026-62828

Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network...

CVE-2026-13791

An insufficient validation of untrusted input flaw was found in the Downloads component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=503850012...

CVE-2026-13817

An insufficient validation of untrusted input flaw was found in the Glic component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=511739631...

CVE-2026-13794

An insufficient validation of untrusted input flaw was found in the WebAppInstalls component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513893425...

CVE-2026-13866

An insufficient validation of untrusted input flaw was found in the Input component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497207698...

CVE-2026-13852

An insufficient validation of untrusted input flaw was found in the WebAppInstalls component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522560124...

CVE-2026-13911

An insufficient data validation flaw was found in the Spellcheck component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=507239830...

CVE-2026-13939

An insufficient validation of untrusted input flaw was found in the WebShare component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513149760...

CVE-2026-13962

An insufficient data validation flaw was found in the PDF component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513721370...

CVE-2026-14009

An insufficient data validation flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516819850...

CVE-2026-13990

An insufficient validation of untrusted input flaw was found in the DataTransfer component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514058439...

CVE-2026-14055

An insufficient validation of untrusted input flaw was found in the Device Trust component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501857663...

CVE-2026-14080

An insufficient validation of untrusted input flaw was found in the TabSwitcher component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=512997517...

CVE-2026-14137

An insufficient validation of untrusted input flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514070067...

CVE-2026-15769

An insufficient validation of untrusted input flaw was found in the Linux Toolkit Theming component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519731111...

CVE-2026-15123

An insufficient data validation flaw was found in the DOM component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523729553...