CVE-2026-106263

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Medium severity security issue caused by improper input validation in the SignIn function. A remote attacker can leverage social engineering to deliver a crafted Chrome extension , which can be used to bypass system access restrict...

CVE-2026-106226

A vulnerability in Google Chrome prior to version 155.0.8059.39 was caused by improper input validation within the Compositing component. This flaw allowed a remote attacker who had already compromised the renderer process to spoof the address bar using a crafted HTML page. No specific exploit in...

CVE-2026-106206

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106185

Google Chrome versions prior to 155.0.8059.39 are vulnerable to improper input validation in Viz . A remote attacker who has already compromised the renderer process can use a crafted HTML page to bypass system access restrictions. The Chromium security severity for this issue is Medium . No spec...

EUVD-2026-93841

Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-63697

Dell System Update (DSU) versions prior to 2.3.0.0 are affected by an Improper Certificate Validation vulnerability (CWE-295). A high-privileged attacker with remote access could exploit this flaw to achieve Remote execution . The vulnerability specifically affects the DSU tool, which corporate a...

CVE-2026-106114 ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions

ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from attacker-declared channel and grid dimensions before confirming that the profile contains the declared values. IccDataReader.ReadClutF32 can request a large float array, and...

EUVD-2026-93556

ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from attacker-declared channel and grid dimensions before confirming that the profile contains the declared values. IccDataReader.ReadClutF32 can request a large float array, and...

CVE-2026-105867

Payload is a free and open source headless content management system. In @payloadcms/storage-s3 versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user can overwrite an existing S3 object belonging to another upload collection when client uploads are enabled for...

CVE-2026-106219

In JetBrains TeamCity versions prior to 2026.2.1 , a lack of validation for Git submodule URLs allows an attacker to read local repositories on the server. This vulnerability is associated with CWE-73 (External Control of File Name or Path) and has a CVSS 3.1 score of 6.5 (Medium) . No specific e...

NPM: Payload: ReDoS in Multipart Content-Type Validation

NPM: Payload: ReDoS in Multipart Content-Type Validation vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.90.0...

CVE-2026-67270

Dell Container Storage Modules CSM versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend...

CVE-2026-105850 Payload: Order confirmation validation issue in Payload Ecommerce

Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerce versions before 3.90.0 and canary versions before 4.0.0-canary.34, use of the Stripe payment adapter can allow a Stripe order confirmation to be processed more than once under certain conditions...

CVE-2026-6060-QUIC-Handshake-Amplification-via-Address-Validation-Bypass

CVE-2026-6060 – QUIC Handshake Amplification via Address Validation Bypass Program Code Python simulation quicserversim.py - Vulnerable QUIC server simulated handshake import socket def sendquicinitialconn, addr, serversalt: Respond with a large "server hello" without validating source address In...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

crypto/x509: Incorrect enforcement of email constraints in crypto/x509

A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly...

crypto/x509: Incorrect enforcement of email constraints in crypto/x509

A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

See-SURF

See-SURF Escáner de seguridad ahora potenciado con IA 🤖 para encontrar posibles parámetros de Server Side Request Forgery SSRF en tu aplicación web. See-SURF no solo te ayuda a detectar posibles parámetros SSRF, sino que también te ayuda a validarlos, protegiendo tu aplicación contra el compromis...

CVE-2026-20230-Scanner

CVE-2026-20230 Scanner A Python-based scanner and validation tool for identifying potentially vulnerable Cisco Unified Communications Manager Unified CM deployments affected by CVE-2026-20230. Features Detects Cisco Unified CM instances Checks WebDialer exposure Supports single-target and bulk...