Linux Distros Unpatched Vulnerability : CVE-2026-103502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Certificate Validation vulnerability in hexpm hexcore allows an attacker who can intercept HTTPS connections to impersonate hex.pm, repo.hex.pm or any...

CVE-2026-100354

A flaw was found in kin-openapi. The runtime schema validation lacks cycle detection when processing circular schema references. A remote attacker can exploit this vulnerability by submitting a request or response that triggers recursive validation, leading to unbounded recursion and stack...

CVE-2026-108373

The ERPNext Enterprise Resource Planning tool is vulnerable to unauthorized access to financial data in versions prior to 15.118.0 and 16.27.0 . The root cause is a missing authorization check within certain endpoints of the Sales Person-wise Transaction Summary report. Specifically, the system f...

CVE-2026-108373 ERPNext: Unauthorised access to financial data due to missing validation

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.118.0 and 16.27.0, certain endpoints in the Sales Person-wise Transaction Summary report fail to enforce proper authorization checks. When a role-limited authenticated user requests the affected financial report, the...

CVE-2026-108373 ERPNext: Unauthorised access to financial data due to missing validation

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.118.0 and 16.27.0, certain endpoints in the Sales Person-wise Transaction Summary report fail to enforce proper authorization checks. When a role-limited authenticated user requests the affected financial report, the...

CVE-2026-108374 ERPNext: Unauthorised status modification due to missing validation

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.121.0 and 16.34.0, certain endpoints for status modification fail to enforce proper authorization checks. A low-privileged authenticated user can invoke state-changing whitelisted methods without required write,...

CVE-2026-108374

The ERPNext enterprise resource planning tool is vulnerable to unauthorised status modification in versions prior to 15.121.0 and 16.34.0 . The root cause is a missing authorization check in certain endpoints used for status modification. A low-privileged authenticated user can bypass required wr...

CVE-2026-108374 ERPNext: Unauthorised status modification due to missing validation

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.121.0 and 16.34.0, certain endpoints for status modification fail to enforce proper authorization checks. A low-privileged authenticated user can invoke state-changing whitelisted methods without required write,...

Exploit for CVE-2026-104736

CVE-2026-104736 - Proof of Concept PoC & Exploit Details !...

EUVD-2026-41876

swoosh has email-derived URL path injection in Microsoft Graph endpoint...

CVE-2026-17275

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers...

CVE-2026-17275 IBM i is Affected by an Improper Validation Vulnerability

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers...

CVE-2026-17275

IBM i versions 7.3, 7.4, 7.5, and 7.6 (product 5770-SS1 ) are vulnerable to an improper authorization issue (CWE-285 ). A remote attacker can perform unauthorized manipulation of distributed transactions because the system fails to properly validate attacker-supplied transaction identifiers. Reme...

CVE-2026-109461

Origin validation error in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to disclose information over a network...

CVE-2026-109461

An origin validation error exists in the Microsoft Authentication Library (MSAL) for Node.js . This vulnerability allows an unauthorized attacker to perform information disclosure over a network. The CVSS 3.1 base score is 5.9 (Medium), with a high impact on confidentiality and high attack comple...

CVE-2026-110916

An improper input validation flaw was found in the Desktop component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/501886301...

Signature validation bypass

More info at https://github.com/litesaml/lightsaml/security/advisories/GHSA-rm7m-7jq4-gw46...

Chromium CVE-2026-106331: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106299: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106343: Improper state validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...