CVE-2026-68068 - The "screenID" parameter in the electronic transaction queue viewer feature within the manual transa

CVE-2026-63713 - The "search" parameter in the view audit logs feature within the utilities section is susceptible to

CVE-2026-102771 - A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this issue i

CVE-2026-102621 - A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function Splash

CVE-2026-96587 - The Viidure Android application embeds permanent, plaintext cloud storage credentials within its com

CVE-2026-94952 - A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150R

CVE-2026-94204 - The central cloud storage backend for the entire dashcam platform is misconfigured with public-read

CVE-2026-93853 - Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup

CVE-2026-81842 - An authenticated user with edit permission on one folder can move a library panel into another folde

CVE-2026-81841 - Pausing a shared (public) dashboard did not revoke its access token for the endpoints that serve fro

CVE-2026-102938 - virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.11, PyEnvCfg.w

CVE-2026-102937 - virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, BatchActiv

CVE-2026-102930 - virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, download_w

CVE-2026-102925 - virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the genera

CVE-2026-102904 - JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jup

CVE-2026-102620 - A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the func

CVE-2026-102253 - iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated

CVE-2026-96274 - In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink mess

CVE-2026-94953 - A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150R

CVE-2026-79538 - metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP i

CVE-2026-79537 - metatool-ai MetaMCP through 2.4.22 contains an insecure direct object reference (IDOR) in the MCP tr

CVE-2026-79536 - bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-pars

CVE-2026-79535 - mbailey VoiceMode <= 8.10.1 is vulnerable to OS Command Injection. The update_config MCP tool (and t

CVE-2026-79534 - mark3labs mcp-filesystem-server v0.11.1 is vulnerable to Directory Traversal due to an improper link

CVE-2026-79417 - Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allow

CVE-2026-79403 - An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permis

CVE-2026-79348 - KitchenAsty through 0.3.0 contains a broken object level authorization (IDOR) vulnerability in the r

CVE-2026-76738 - A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could a

CVE-2026-76737 - An authenticated path traversal vulnerability exists in the command line interface of HPE Networking

CVE-2026-76736 - A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant

CVE-2026-76735 - A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Ne

CVE-2026-76734 - A memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow

CVE-2026-76733 - A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could

CVE-2026-76732 - A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Network

CVE-2026-76731 - An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allo

CVE-2026-76730 - An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs

CVE-2026-76729 - A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an au

CVE-2026-76728 - A vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated re

CVE-2026-76727 - Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that

CVE-2026-76726 - An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow

CVE-2026-76725 - A vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that c

CVE-2026-76724 - A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that c

CVE-2026-76723 - Buffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS tha

CVE-2026-76722 - Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant

CVE-2026-76721 - Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that cou

CVE-2026-67993 - basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f contains a login cross-site requ

CVE-2026-67987 - crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains polynomial-time regular e

CVE-2026-61519 - Liberu CRM 0.9.1 before 10.0.0 contains a broken access control vulnerability that allows any user h

CVE-2026-53989 - Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that

CVE-2026-53988 - Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints

CVE-2026-39117 - An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allow

CVE-2026-11415 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-102879 - ClaraVerse through 0.3.1 contains server-side request forgery protection bypasses in the download_fi

CVE-2026-102878 - mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API t

CVE-2026-102877 - Fider before 0.38.0 contains a server-side request forgery vulnerability due to a time-of-check time

CVE-2026-102876 - SurrealDB before 3.3.0 contains an authorization bypass in HTTP session construction where check_aut

CVE-2026-102875 - VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader tha

CVE-2026-102331 - Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote atta

CVE-2026-102330 - Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote at

CVE-2026-102329 - Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to b

CVE-2026-102328 - Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute ar

CVE-2026-102327 - Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a r

CVE-2026-102326 - Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute ar

CVE-2026-102325 - Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to

CVE-2026-102324 - Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker

CVE-2026-102323 - Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute ar

CVE-2026-102321 - Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute ar

CVE-2026-102320 - Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who

CVE-2026-102319 - Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who

CVE-2026-102318 - Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to rea

CVE-2026-102317 - Improper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed

CVE-2026-102316 - Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging

CVE-2026-102315 - Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remo

CVE-2026-102314 - UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker t

CVE-2026-102313 - Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remo

CVE-2026-102312 - UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remo

CVE-2026-102311 - Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote

CVE-2026-102310 - Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker

CVE-2026-102309 - Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to ex

CVE-2026-102308 - Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging

CVE-2026-102307 - Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remot

CVE-2026-102306 - Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to pot

CVE-2026-102305 - UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote at

CVE-2026-102304 - Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to exe

CVE-2026-102303 - Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote

CVE-2026-102302 - Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute a

CVE-2026-102301 - Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had

CVE-2026-102300 - Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker t

CVE-2026-102299 - Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute ar

CVE-2026-102252 - A path traversal vulnerability (CWE-22) in the embedded VMDK filesystem extractor in Google OSV-SCAL

CVE-2026-100299 - In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy password hash on th

CVE-2026-100298 - In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, two user‑information endpoints can reveal sensit

CVE-2026-100297 - In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be

CVE-2026-100296 - In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, an empty-body POST to /setUserConfig, dispatched

CVE-2026-100295 - In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an internal debug interface can be enabled throu

CVE-2026-100294 - In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credenti

CVE-2026-100293 - In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud update mechanisms apply

CVE-2026-100292 - In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can be enabled through

CVE-2026-100291 - In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, several ONVIF service endpoints process manageme

CVE-2024-31027 - Cross Site Scripting vulnerability in Greek Universities Network (GUnet) Open eClass Platform v.3.15

CVE-2024-31026 - An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker

CVE-2026-102831 - JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jup

CVE-2026-102830 - JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jup

CVE-2026-102829 - simple-git, an interface for running git commands in any node.js application, enables applications t

CVE-2026-102828 - simple-git, an interface for running git commands in any node.js application, enables applications t

CVE-2026-102827 - simple-git, an interface for running git commands in any node.js application, enables applications t

CVE-2026-102826 - simple-git, an interface for running git commands in any node.js application, enables applications t

CVE-2026-102825 - Russh is a Rust SSH client and server library. Prior to 0.62.6, the USERAUTH_REQUEST path reached fr

CVE-2026-102824 - Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 imp

CVE-2026-102823 - Russh is a Rust SSH client and server library. Prior to 0.63.1, client_read_authenticated in russh/s

CVE-2026-102822 - Russh is a Rust SSH client and server library. Prior to 0.63.1, a connection configured to permit ma

CVE-2026-102821 - Russh is a Rust SSH client and server library. Prior to 0.63.2, an authenticated remote peer can sen

CVE-2026-102820 - pageant provides a [PageantStream] type that implements [AsyncRead] and [AsyncWrite] traits and can

CVE-2026-102616 - A vulnerability was detected in risesoft-y9 WorkFlow-Engine up to 9.6.10. Impacted is the function g

CVE-2026-95385 - Inappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior to 154.0.80

CVE-2026-95384 - Race condition in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote att

CVE-2026-95382 - Improper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker

CVE-2026-95381 - Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attac

CVE-2026-95380 - Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging so

CVE-2026-95376 - Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjac

CVE-2026-95375 - Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attac

CVE-2026-95374 - Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker

CVE-2026-95373 - Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leverag

CVE-2026-95372 - Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who h

CVE-2026-95371 - Missing authorization in Views in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote at

CVE-2026-95370 - Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacke

CVE-2026-95369 - Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacke

CVE-2026-95368 - Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacke

CVE-2026-95367 - Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker w

CVE-2026-95366 - Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote attacker w

CVE-2026-95365 - Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to pot

CVE-2026-95364 - Improper input validation in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote atta

CVE-2026-95363 - UI misrepresentation in FileSystem in Google Chrome prior to 154.0.8037.57 allowed a remote attacker

CVE-2026-95362 - Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote atta

CVE-2026-95361 - Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker levera

CVE-2026-95360 - Race condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveragi

CVE-2026-95359 - Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote

CVE-2026-95358 - Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a lo

CVE-2026-95357 - Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote at

CVE-2026-95356 - Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker lev

CVE-2026-95355 - Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a re

CVE-2026-95354 - Use after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had

CVE-2026-95353 - Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to exec

CVE-2026-95352 - Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacke

CVE-2026-95351 - Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had co

CVE-2026-95350 - Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote atta

CVE-2026-95349 - Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote atta

CVE-2026-95348 - Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who ha

CVE-2026-95347 - Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacke

CVE-2026-95346 - UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker

CVE-2026-95345 - Use after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute

CVE-2026-95344 - Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leverag

CVE-2026-95343 - Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to exec

CVE-2026-95342 - Missing authorization in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to byp

CVE-2026-95341 - Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attack

CVE-2026-95340 - Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote

CVE-2026-95339 - Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to

CVE-2026-95338 - Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execut

CVE-2026-95337 - UI misrepresentation in Messages in Google Chrome on on Android prior to 154.0.8037.57 allowed a rem

CVE-2026-95336 - Information leak in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote a

CVE-2026-95335 - Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had comp

CVE-2026-95334 - Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remot

CVE-2026-95333 - Use after free in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execu

CVE-2026-95332 - Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed

CVE-2026-95331 - Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to po

CVE-2026-95330 - Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote atta

CVE-2026-95329 - Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote

CVE-2026-95328 - Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local atta

CVE-2026-95327 - Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to

CVE-2026-95326 - Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker le

CVE-2026-95325 - Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potenti

CVE-2026-95324 - Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who

CVE-2026-95323 - UI misrepresentation in Chromium in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote

CVE-2026-95322 - Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote at

CVE-2026-95321 - UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57 allowed a rem

CVE-2026-95320 - Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacke

CVE-2026-95319 - Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had

CVE-2026-95318 - Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potent

CVE-2026-95317 - Incorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote att

CVE-2026-95316 - Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attack

CVE-2026-95315 - Use after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potential

CVE-2026-95314 - Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who

CVE-2026-95313 - Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to po

CVE-2026-95312 - Information leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who

CVE-2026-95311 - Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker l

CVE-2026-95310 - Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to exec

CVE-2026-95309 - UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote at

CVE-2026-95308 - Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who ha

CVE-2026-95307 - UI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 allowed a remote atta

CVE-2026-95306 - Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute ar

CVE-2026-95305 - UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker

CVE-2026-95304 - Out of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execu

CVE-2026-95303 - Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed a remote attacker le

CVE-2026-95302 - Incorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a l

CVE-2026-95301 - Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacke

CVE-2026-95300 - Missing authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker

CVE-2026-95299 - Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute a

CVE-2026-95298 - Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potent

CVE-2026-95297 - Missing authorization in Contextual Tasks in Google Chrome prior to 154.0.8037.57 allowed a remote a

CVE-2026-95296 - Missing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote att

CVE-2026-95295 - Information leak in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a local attacke

CVE-2026-95294 - UI misrepresentation in Browser in Google Chrome prior to 154.0.8037.57 allowed a remote attacker le

CVE-2026-95293 - Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to r

CVE-2026-95292 - Incorrect authorization in Safebrowsing in Google Chrome prior to 154.0.8037.57 allowed a remote att

CVE-2026-95291 - UI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to 154.0.8037.57 allowed

CVE-2026-95290 - Missing authorization in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who h

CVE-2026-95289 - Incorrect authorization in Scroll in Google Chrome prior to 154.0.8037.57 allowed a remote attacker

CVE-2026-95288 - UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote at

CVE-2026-95287 - Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacke

CVE-2026-95286 - Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to exec

CVE-2026-95285 - Missing authorization in WebView in Google Chrome on on Android prior to 154.0.8037.57 allowed a rem

CVE-2026-95284 - Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote atta

CVE-2026-95283 - Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attac

CVE-2026-95282 - Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to exec

CVE-2026-95281 - Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote atta

CVE-2026-95280 - Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute ar

CVE-2026-95279 - UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.57 allowed a remo

CVE-2026-95278 - Missing authorization in WakeLock in Google Chrome prior to 154.0.8037.57 allowed a remote attacker

CVE-2026-95277 - Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potenti

CVE-2026-95276 - Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacke

CVE-2026-95275 - Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remo

CVE-2026-95274 - Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attack

CVE-2026-94954 - A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150R

CVE-2026-84842 - IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the

CVE-2026-84440 - IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification

CVE-2026-84436 - IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI f

CVE-2026-84422 - IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME re

CVE-2026-84421 - IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute a

CVE-2026-84414 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of a

CVE-2026-12345 - The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can mo

CVE-2026-102811 - Marmite through 0.4.2 contains missing authentication in the development server endpoints /__marmite

CVE-2026-102810 - Marmite through 0.4.2 contains a path traversal vulnerability in the development server started by -

CVE-2026-102809 - PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 te

CVE-2026-102808 - PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sd_stress comm

CVE-2026-102807 - OpenClaw before 2026.9.4 contains an incorrect authorization vulnerability in the mcp.app.view metho

CVE-2026-102806 - OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local me

CVE-2026-102762 - The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLI

CVE-2026-102761 - NetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advanc

CVE-2026-102760 - When NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session is

CVE-2026-102759 - NetX Secure TLS accepts an empty application-data record without verifying its message authenticatio

CVE-2026-102758 - The `_nx_secure_x509_asn1_tlv_block_parse()` function parses ASN.1 TLV (tag-length-value) blocks out

CVE-2026-102757 - An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addres

CVE-2026-102730 - Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-

CVE-2026-102729 - `gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it eve

CVE-2026-102728 - Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message

CVE-2026-102727 - FTP Passive Data Connection Not Bound to the Authenticated Control Peer

CVE-2026-102726 - Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read

CVE-2026-102725 - Out-of-bounds Read from Unvalidated MSRP Attribute List Length

CVE-2026-102724 - NULL Pointer Dereference When Evicting the Sole MSRP Attribute

CVE-2026-102723 - NULL Pointer Dereference on MSRP Attribute Table Exhaustion