CVE-2026-106299

Improper input validation in WebAudio in Google Chrome prior to 155.0...

CVE-2026-106226

Improper input validation in Compositing in Google Chrome prior to 155...

CVE-2026-106346

Improper state validation in DevTools in Google Chrome prior to 155.0...

CVE-2026-106414

Improper input validation in Mobile in Google Chrome on on iOS prior t...

CVE-2026-106263

Improper input validation in SignIn in Google Chrome prior to 155.0.80...

Linux Distros Unpatched Vulnerability : CVE-2026-106185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system...

Linux Distros Unpatched Vulnerability : CVE-2026-106263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access...

Linux Distros Unpatched Vulnerability : CVE-2026-106396

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web...

PT-2026-107545

Name of the Vulnerable Software and Affected Versions @backstage/plugin-kubernetes-backend versions prior to 0.21.8 Description Improper entity validation in a deprecated Kubernetes services endpoint allows an authenticated user with Kubernetes read permissions to access workload data beyond thei...

CVE-2026-97678 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation...

CVE-2026-97678

IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by CVE-2026-97678 , which allows a remote authenticated attacker to execute arbitrary code due to improper input validation (CWE-693). The vulnerability has a HIGH base severity score of 8.8 . To remediate this issue, IBM strongly recomm...

CVE-2026-97679 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command 'Code Injection' related to improper input validation...

CVE-2026-97679

IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by a Code Injection vulnerability (CVE-2026-97679 ). A remote authenticated attacker can execute arbitrary code due to the improper neutralization of special elements used in an OS command, which stems from improper input validation . Th...

CVE-2026-97679 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command 'Code Injection' related to improper input validation...

CVE-2026-106331

An improper input validation flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553256068...

CVE-2026-43598

A flaw was found in the AMD ROCm Communication Collectives Library RCCL. Due to improper input validation, a network-adjacent attacker or a compromised peer node can supply a crafted memory address that the library accesses without proper verification. This vulnerability could allow an attacker t...

CVE-2026-106500

Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by improper task state validation in scaffolder backend. An authenticated user with permission to create and access Scaffolder tasks...

CVE-2026-106506

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by improper input validation in scaffolder task list ordering. An authenticated Backstage user with permission to create and read relevant scaffolder tasks m...

CVE-2026-106498

Backstage is an open framework for building developer portals. Prior to 3.5.1, 3.6.2, 3.7.2, 3.8.2 and 3.9.1, the @backstage/plugin-catalog-backend package is affected by improper url validation in catalog entity placeholder resolution. An authenticated Backstage user could craft a catalog entity...

CVE-2026-106506 Backstage: Improper input validation in scaffolder task list ordering

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by improper input validation in scaffolder task list ordering. An authenticated Backstage user with permission to create and read relevant scaffolder tasks m...