Stable Channel Update for ChromeOS / ChromeOS Flex

CVE-2026-95311 · CVE-2026-95318 · CVE-2026-95373 · CVE-2026-95313 · CVE-2026-95338 · CVE-2026-95289 · CVE-2026-95316 · CVE-2026-95343 · CVE-2026-95286 · CVE-2026-95300 · CVE-2026-95356 · CVE-2026-95277 · CVE-2026-95344 · CVE-2026-95364 · CVE-2026-95351 · CVE-2026-95306 · CVE-2026-95305 · CVE-2026-95339 · CVE-2026-95374 · CVE-2026-95333 · CVE-2026-95342 · CVE-2026-95304 · CVE-2026-95310 · CVE-2026-95274 · CVE-2026-95312 · CVE-2026-95275 · CVE-2026-95348 · CVE-2026-95340 · CVE-2026-95365 · CVE-2026-95282 · CVE-2026-95280 · CVE-2026-95335 · CVE-2026-95293

 The Stable channel is being updated to OS version 16805.33.0 (Browser version 154.0.8037.151) for most ChromeOS devices

历史摘要 · 未重新核验 · Google Chrome Releases

从一个辅助 API 看资源边界：CVE-2026-71486（vLLM）

CVE-2026-71486

从一个辅助 API 看资源边界：CVE-2026-71486（vLLM）

历史摘要 · 未重新核验 · 先知社区

Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

CVE-2026-105133

Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control

历史摘要 · 未重新核验 · The Hacker News

ageLANServer: Unbounded JSON Array Allocation in AoE3 Cloud `getFileURL` Endpoint Leads to Remote Denial of Service

CVE-2026-107839

ageLANServer provides a cross-platform web server and launcher for offline multiplayer in several Age of Empires and Age

历史摘要 · 未重新核验 · OSV.dev

Nginx-UI AuthRequired token cookie fallback enables CSRF against management APIs

CVE-2026-107809

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a browser-manage

历史摘要 · 未重新核验 · OSV.dev

Nginx UI: Node Secret Credential Exposure via URL Query Parameter

CVE-2026-107807

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, Nginx UI accepts the Node.Secret mast

历史摘要 · 未重新核验 · OSV.dev

Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout

CVE-2026-107804

Nginx UI is a web user interface for the Nginx web server. From 2.2.0 until 2.6.0, the bundled reverse proxy does not pr

历史摘要 · 未重新核验 · OSV.dev

CVE-2026-107888

CVE-2026-107888

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-cr

历史摘要 · 未重新核验 · OSV.dev

Jivejdon through commit ee67a65e Missing Rate Limiting via /account/smsVRAction SMS Endpoint

CVE-2026-107830

Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated /account/smsVRAction en

历史摘要 · 未重新核验 · OSV.dev

Jivejdon through 5.0 Stored XSS via Private Short Messages

CVE-2026-107800

Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject

历史摘要 · 未重新核验 · OSV.dev

Jivejdon through 5.0 Stored XSS via messageListBody.jsp Forum Message Rendering

CVE-2026-107799

Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject

历史摘要 · 未重新核验 · OSV.dev

Jivejdon through commit ee67a65e Reflected XSS via taggedThreadList.jsp tagID and count Parameters

CVE-2026-107796

Jivejdon from commit 5489372d through commit ee67a65e contains a reflected cross-site scripting vulnerability in applica

历史摘要 · 未重新核验 · OSV.dev

Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, the /~/* admin preview route in packages/tinacms/src/admin/index.tsx can turn an a...

CVE-2026-108261

Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, the /~/* admin preview ro

历史摘要 · 未重新核验 · NVD

IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vul...

CVE-2026-84272

IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component.

历史摘要 · 未重新核验 · NVD

PLANET VDR-300NU ADSL Router - 未授权修改DNS

PLANET VDR-300NU ADSL Router - 未授权修改DNS

历史摘要 · 未重新核验 · 知道创宇 / Seebug

Acknowledgements

Acknowledgements

历史摘要 · 未重新核验 · Android Security Bulletin

Vikunja: Link-share token can enumerate users through the v2 API

CVE-2026-91981

### Summary A link-share token, the credential you hand out to let someone view a shared project, can call the v2 user-s

历史摘要 · 未重新核验 · GitHub Advisory

Vikunja: Read-only project members can obtain any link share's access hash via the single-share read endpoint (v1 and v2) and escalate to the share's permission level

CVE-2026-91985

## Summary A user who has only read permission on a project can call the single link-share read endpoint and receive th

历史摘要 · 未重新核验 · GitHub Advisory

Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite

CVE-2026-107806

## Summary An authenticated nginx-ui user can call `POST /api/restore`, upload a forged encrypted backup, restore `app.

历史摘要 · 未重新核验 · GitHub Advisory

Vikunja: Link-share principal ID collision allows cross-account API token issuance and management

CVE-2026-68581

Executive Summary Vikunja accepts both regular-user JSON Web Tokens (JWTs) and link-share JWTs through its generic auth

历史摘要 · 未重新核验 · GitHub Advisory