PT-2026-81125

Adminer 4.6.0 before 5.5.0 prepends the client-supplied X-Forwarded-Prefix header to $ SERVER"REQUEST URI" with no trusted-proxy check and no validation of the prefix value. An attacker can supply an absolute URL e.g. X-Forwarded-Prefix: https://evil.example that flows into Location redirect...

CVE-2026-16434: Improper Input Validation

Adminer 4.6.0 through 5.5.0 fixed in 5.5.1 contains an incomplete fix for a prior X-Forwarded-Prefix vulnerability GHSA-8478-xrj3-h9c2. The validation guard bootstrap.inc.php only rejects prefixes matching ^/^/, blocking //evil.com but allowing values such as /\evil.com whose second character is ...

CVE-2026-15088: Improper Input Validation

Vulnerability in Drupal Development Environment. This issue affects Development Environment versions:...

CVE-2026-79015: Improper Input Validation

Improper input validation in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78980: Improper Input Validation

Improper input validation in ReaderMode in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78963: Improper Input Validation

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79255: Improper Input Validation

Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79192: Improper Input Validation

Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79139: Improper Input Validation

Improper input validation in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79132: Improper Input Validation

Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-81790

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in ANGLE, a graphics abstraction layer, allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a...

CVE-2026-16643: Improper Input Validation

Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions:...

CVE-2026-16642: Improper Input Validation

Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions:...

CVE-2026-16641: Improper Input Validation

Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions:...

The vulnerability of the ext4_feature_set_ok() function in the fs/ext4/super.c file of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4featuresetok function in the fs/ext4/super.c file of the Ext4 file system in the Linux operating system is related to improper validation of consistency in input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the kalmiabind() function in the drivers/net/usb/kalmia.c module of the Linux kernel’s USB network adapter driver allows a hacker to cause a service failure.

The vulnerability of the kalmiabind function in the drivers/net/usb/kalmia.c module of the Linux USB network adapter driver module is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mshv_partition_create_region() function in the drivers/hv/mshv_root_main.c file of the Linux operating system’s Microsoft HyperV guest mode driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mshvpartitioncreateregion function in the drivers/hv/mshvrootmain.c file of the Microsoft HyperV kernel driver for Linux operating systems is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2026-81145

Name of the Vulnerable Software and Affected Versions Grav CMS versions prior to 2.0.16 Description An origin validation bypass exists in the Uri::referrer and Pages::referrerRoute methods. The issue occurs because the Referer header is validated using an unanchored string prefix match via str...

UBUNTU-CVE-2026-63073

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...

Google Chrome < 152.0.7977.64 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 152.0.7977.64. It is, therefore, affected by multiple vulnerabilities as referenced in the 202608stable-channel-update-for-desktop0256176589 advisory. - Use after free in Aura in Google Chrome prior to 152.0.7977.65 allow...