CVE-2026-16970 DFIR-IRIS Insufficient Logout Implementation

The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time...

CVE-2026-18362 DFIR-IRIS Missing Brute Force Protection in User Authentication

The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks...

CVE-2026-18362

The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks...

CVE-2026-16971 DFIR-IRIS Missing Brute Force Protection in OTP Validation

The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks...

CVE-2026-16971

The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks...

CVE-2026-18361

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the datastore upload function...

CVE-2026-18360

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the custom attributes function...

DEBIAN-CVE-2026-17872

Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17872

Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50621

Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14122

An insufficient validation of untrusted input flaw was found in the WebAppInstalls component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513824891...

KLA91180 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Use after free vulnerability ...

CVE-2026-59886 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, k8s-sidecar, kubeflow-jupyter-web-app, mlflow, superset, datadog-agent, kserve, py3-cassandra-medusa, airflow, kubeflow-volumes-web-app, mitmproxy, kubeflow-pipelines...

GHSA-8PPF-4F7H-5PPJ vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, k8s-sidecar, kubeflow-jupyter-web-app, mlflow, superset, datadog-agent, kserve, py3-cassandra-medusa, airflow, kubeflow-volumes-web-app, mitmproxy, kubeflow-pipelines...

CVE-2026-59890 vulnerabilities

Vulnerabilities for packages: httpie, py3-setuptools, kubeflow-katib, kubeflow-jupyter-web-app, mlflow, superset, py3-pipenv, datadog-agent, pypy-3.10, airflow, kubeflow-volumes-web-app...

GHSA-HM4W-WWCW-MR6R vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, k8s-sidecar, kubeflow-jupyter-web-app, mlflow, superset, datadog-agent, kserve, py3-cassandra-medusa, airflow, kubeflow-volumes-web-app, mitmproxy, kubeflow-pipelines...

GHSA-H35F-9H28-MQ5C vulnerabilities

Vulnerabilities for packages: httpie, py3-setuptools, kubeflow-katib, kubeflow-jupyter-web-app, mlflow, superset, py3-pipenv, datadog-agent, pypy-3.10, airflow, kubeflow-volumes-web-app...

CVE-2026-59890 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.2-fips, kubeflow-jupyter-web-app, datahub-ingestion, ansible-operator-fips, openstack-placement-2026.1-fips, openstack-keystone-2025.1, openstack-glance-2026.1-fips, nvidia-nsight-compute-13.3, openstack-horizon-2025.1, httpie,...

GHSA-8PPF-4F7H-5PPJ vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.2-fips, kubeflow-jupyter-web-app, datahub-ingestion, openstack-keystone-2025.1, kubeflow-pipelines, lmcache-cuda-12.8, superset, awx, mlflow, kubeflow-volumes-web-app, authentik-fips, wazuh-manager-fips, openstack-keystone-2026.1, kubeflow,...

CVE-2026-59885 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.2-fips, kubeflow-jupyter-web-app, datahub-ingestion, openstack-keystone-2025.1, kubeflow-pipelines, lmcache-cuda-12.8, superset, awx, mlflow, kubeflow-volumes-web-app, authentik-fips, wazuh-manager-fips, openstack-keystone-2026.1, kubeflow,...