Vuldb Updates

A vulnerability categorized as problematic has been discovered in Google Chrome. Affected by this vulnerability is an unknown functionality. Such manipulation leads to cross site scripting. This vulnerability is referenced as CVE-2026-106232. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability was found in Google Chrome. It has been classified as problematic. Affected is an unknown function of the component Offline. The manipulation leads to information disclosure. This vulnerability is referenced as CVE-2026-106230. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

A vulnerability, which was classified as critical, was found in Google Chrome. Affected is an unknown function of the component FileSystem. Executing a manipulation can lead to improper access controls. This vulnerability is handled as CVE-2026-106229. The attack can be executed remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability classified as critical was found in Google Chrome. This affects an unknown function of the component Google Lens. Such manipulation leads to improper privilege management. This vulnerability is traded as CVE-2026-106228. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in Google Chrome. This impacts an unknown function of the component Core. Performing a manipulation results in use after free. This vulnerability is known as CVE-2026-106227. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability marked as problematic has been reported in Google Chrome. Impacted is an unknown function of the component Autofill. The manipulation leads to improper authorization. This vulnerability is documented as CVE-2026-106225. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability classified as critical has been found in Google Chrome. The impacted element is an unknown function of the component Compositing. This manipulation causes improper input validation. This vulnerability appears as CVE-2026-106226. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability described as problematic has been identified in Google Chrome. The affected element is an unknown function of the component Google Lens. The manipulation results in permissive cross-domain policy with untrusted domains. This vulnerability is reported as CVE-2026-106224. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability identified as problematic has been detected in OctoPrint 1.0.0. This impacts the function getSettings of the file src/octoprint/server/ajax/settings.py of the component API Key Handler. This manipulation causes information disclosure. This vulnerability is tracked as CVE-2013-10077. The attack is possible to be carried out remotely. Moreover, an exploit is present. You should upgrade the affected component. Affected is a 2013 release where access control was not yet implemented and the endpoint was part of first-run setup). The API key has been admin-gated since 1.2.0 and GET /api/settings is protected by Permissions.SETTINGS_READ plus reauthentication in all current releases.

A vulnerability was found in Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0 and classified as critical. Impacted is the function handleListIssues of the file src/handlers/issue-handlers.ts. Such manipulation of the argument state/labels leads to os command injection. This vulnerability is uniquely identified as CVE-2026-116369. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Omega Solution Restro POS up to 20261026. This impacts an unknown function of the file /sale-invoice/. Executing a manipulation of the argument productUnitSalePrice can lead to business logic errors. This vulnerability appears as CVE-2026-116461. The attack may be performed from remote. In addition, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability categorized as problematic has been discovered in BKWLD Decoy up to 5.11.1. The impacted element is an unknown function of the file Policy.php of the component Authorization Policy. The manipulation of the argument role results in improper privilege management. This vulnerability was named CVE-2026-116471. The attack may be performed from remote. In addition, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in a2aproject a2a-dotnet up to 1.0.0-preview2. It has been classified as problematic. The impacted element is the function A2AJsonRpcProcessor.ProcessRequestAsync of the file src/A2A.AspNetCore/A2AJsonRpcProcessor.cs of the component Parser. The manipulation leads to information exposure through error message. This vulnerability is traded as CVE-2026-116477. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability categorized as problematic has been discovered in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Affected is an unknown function of the file patientregistration.php. Such manipulation of the argument pat_name leads to cross site scripting. This vulnerability is uniquely identified as CVE-2026-116482. The attack can be launched remotely. Moreover, an exploit is present. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. It has been rated as very critical. Affected by this issue is the function sub_402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENT_LENGTH results in stack-based buffer overflow. This vulnerability is known as CVE-2026-116508. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability classified as very critical was found in Linux Kernel up to 6.18.56/7.2.10. This issue affects some unknown processing of the file /CPU/AMD of the component AMD CPU. Executing a manipulation can lead to improper synchronization. This vulnerability is handled as CVE-2026-99099. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability identified as problematic has been detected in vllm-project vLLM up to 0.31.x. The affected element is an unknown function of the component CORSMiddleware. The manipulation leads to cross-site request forgery. This vulnerability is referenced as CVE-2026-115917. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Go JOSE up to 4.1.4. Affected by this issue is some unknown functionality of the component CBC-HMAC Unpadding. Performing a manipulation results in improper validation of array index. This vulnerability is known as CVE-2026-116585. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104 and classified as very critical. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. This vulnerability is reported as CVE-2026-116505. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability categorized as problematic has been discovered in Welcart E-Commerce Plugin up to 2.12.5 on WordPress. Impacted is an unknown function. Such manipulation of the argument gid leads to cross site scripting. This vulnerability is referenced as CVE-2026-118070. It is possible to launch the attack remotely. No exploit is available.