CVE-2026-76742 Authentication Bypass in the Web Management Interface of AOS-S

Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to gain unauthorized access to the affected system...

CVE-2026-76742 Authentication Bypass in the Web Management Interface of AOS-S

Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to gain unauthorized access to the affected system...

EUVD-2026-93976

Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to gain unauthorized access to the affected system...

CVE-2026-76742

An authentication bypass vulnerability exists in the web management interface of AOS-S . Successful exploitation by an unauthenticated remote attacker could result in unauthorized access to the affected system. The vulnerability carries a CRITICAL base severity score of 9.8. No specific root caus...

CVE-2026-106513 MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change

MISP exposes critical infrastructure settings—specifically the Redis host addresses used by the core application, the ZeroMQ plugin, and the SimpleBackgroundJobs plugin—through its web UI and API to site-admin users. The background job workers trust raw Redis job payloads without additional...

CVE-2026-106310

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a use of released resource within the FontAccess component. A remote attacker who has already compromised the renderer process can exploit this issue to bypass web origin policy by serving a crafted HTML page. The vulnerability is cl...

EUVD-2026-93650

Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106310

Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106310

Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106418

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in the Network component. This vulnerability allows a remote attacker to bypass the web origin policy by leveraging social engineering and sending crafted network traffic . The impact is characterized as ...

EUVD-2026-93634

Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-106418

Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-106331

Google Chrome (Chromium) versions prior to 155.0.8059.39 are vulnerable to an improper input validation flaw in the Extensions component. A remote attacker could leverage social engineering to use a crafted Chrome extension to bypass the web origin policy , gaining access to a privileged page. Th...

EUVD-2026-93629

Improper input validation in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted Chrome extension. Chromium security severity: Low...

EUVD-2026-93620

Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106221

Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106264

Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106264

Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106422

An incorrect authorization flaw exists in the API component of the Chromium browser , affecting Google Chrome versions prior to 155.0.8059.39 . A remote attacker can exploit this vulnerability by using a crafted HTML page to bypass web origin policy . The security severity is rated as Low by Chro...

CVE-2026-106264

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in Web Authentication (Passkeys & Security Keys) . This security issue allows a remote attacker to spoof UI elements when a user visits a crafted HTML page. The chromium security severity for this vulnera...