CVE-2026-84140 — Critical vulnerability brief
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird…
Tag: critical
CVE-2026-84135 — Critical vulnerability brief
Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155.
CVE-2026-84200 — Critical vulnerability brief
Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions,…
CVE-2026-18550 — Critical vulnerability brief
The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to,…
CVE-2026-75865 — Critical vulnerability brief
The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable…
CVE-2026-82971 — Critical vulnerability brief
A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/net_tr.cgi of the component CGI Script.…
CVE-2026-82856 — Critical vulnerability brief
@hulumi/policies versions before 1.3.2 fail to properly validate set-qualified AWS IAM condition operators in GitHub OIDC trust policies. Attackers can use ForAnyValue:StringLike…
CVE-2026-82857 — Critical vulnerability brief
hulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration IAM policy that allows role lifecycle operations on af-e2e-*…
CVE-2026-82542 — Critical vulnerability brief
A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of…
CVE-2026-15369 — Critical vulnerability brief
The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3.…