Total
4800 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-100588 | 2026-10-05 | N/A | 8.3 HIGH | ||
| OpenClaw (npm package 'openclaw') before 2026.7.1 does not enforce the administrator scope requirement on browser control when it is reached through the node.invoke method, although direct browser.request access requires administrator scope. In Gateway deployments that honor caller identity and narrower operator scopes, a write-scoped caller with access to a connected browser-capable node can inspect pages, navigate tabs, or interact with browser-visible applications without the configured admin requirement; practical impact depends on the browser profile and signed-in state. Shared-secret token and password callers are considered fully trusted operators under OpenClaw's security model and are not affected. The issue is fixed in 2026.7.1. | |||||
| CVE-2026-100539 | 2026-10-05 | N/A | 2.6 LOW | ||
| OpenClaw (npm package 'openclaw') before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memory_search and memory_get tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit disablement like an unavailable configuration snapshot and restores the stale authority. As a result, during an already-running agent turn the model can continue searching and reading durable memory after the operator revoked that access, for the remainder of that run. Exploitation requires memory to be disabled while a previously created memory tool remains active. The issue is fixed in 2026.8.1. | |||||
| CVE-2026-100535 | 2026-10-05 | N/A | 7.5 HIGH | ||
| OpenClaw (npm package 'openclaw') versions >= 2026.4.5 and < 2026.8.1 can lose the originating requester's restrictions and untrusted provenance when session-derived text is persisted to session memory. In deployments where session-memory capture and dreaming are enabled, a restricted external sender whose messages are admitted with limited tools can persist instructions that are later supplied to an unattended background (dreaming) agent holding broader file and command capabilities, allowing actions beyond the authority of the original turn and affecting files, commands, or services available to that agent. Exploitation requires the content to be captured, selected for later processing, and followed by the model. The issue is fixed in 2026.8.1. | |||||
| CVE-2025-0237 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-10-05 | N/A | 5.4 MEDIUM |
| The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6. | |||||
| CVE-2026-103626 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-10-05 | N/A | 9.6 CRITICAL |
| Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-103488 | 1 Jetbrains | 1 Youtrack | 2026-10-05 | N/A | 7.1 HIGH |
| In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues | |||||
| CVE-2026-90450 | 2026-10-02 | N/A | 4.3 MEDIUM | ||
| The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather than defaulting to deny. Any request handler that is not explicitly registered in this table is reachable by any authenticated user regardless of their assigned role, and any newly added handler is fail-open by default until explicitly added to the table. | |||||
| CVE-2026-100259 | 1 Jetbrains | 1 Youtrack | 2026-10-02 | N/A | 4.3 MEDIUM |
| In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access | |||||
| CVE-2026-100262 | 1 Jetbrains | 1 Youtrack | 2026-10-02 | N/A | 7.6 HIGH |
| In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates | |||||
| CVE-2026-104054 | 2026-10-02 | 6.5 MEDIUM | 6.3 MEDIUM | ||
| A security flaw has been discovered in calcom cal.diy up to 6.2.0. This affects the function doesUserIdHaveAccessToBooking of the file BookingAccessService.ts of the component PBAC Permission Engine. Performing a manipulation results in missing authorization. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance. | |||||
| CVE-2026-95314 | 1 Google | 1 Chrome | 2026-10-02 | N/A | 8.1 HIGH |
| Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-104480 | 2026-10-02 | N/A | N/A | ||
| Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecognized participant. An attacker in control of the DAVE signaling path (the voice gateway, or an equivalent position able to add, alter, or withhold signaling messages to a client) could cause affected clients to accept an unauthorized member into the end-to-end encrypted media session, compromising the confidentiality and integrity of audio and video. | |||||
| CVE-2026-55176 | 2026-10-02 | N/A | 9.0 CRITICAL | ||
| Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, two authentication helpers in /app/server.js — verifyContainerAuth() and authenticateWorkspaceHttp() — accept the global CONTAINER_SHARED_SECRET as a bearer token without verifying which workspace the caller belongs to. Because that secret is set identically on every container in the Fly app and is reachable from the user-facing process environment inside each workspace, any tenant can use it to authenticate to any other tenant's workspace API. The result is cross-workspace read, write, and destructive-restore primitives reachable from any paying customer's shell. The existing per-workspace token check (workspaceTokenMatches) protects the user-facing per-workspace token path, but the shared-secret bearer path bypasses it entirely. At time of publication, there are no publicly known patches. | |||||
| CVE-2026-100270 | 1 Jetbrains | 1 Youtrack | 2026-10-02 | N/A | 3.3 LOW |
| In JetBrains YouTrack before 2026.2.19197 low-level Admin Read permission users could disclose integration credentials via import configurations | |||||
| CVE-2026-100273 | 1 Jetbrains | 1 Youtrack | 2026-10-02 | N/A | 8.2 HIGH |
| In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code execution | |||||
| CVE-2026-100276 | 1 Jetbrains | 1 Youtrack | 2026-10-02 | N/A | 5.9 MEDIUM |
| In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action | |||||
| CVE-2026-100277 | 1 Jetbrains | 1 Youtrack | 2026-10-02 | N/A | 8.9 HIGH |
| In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature | |||||
| CVE-2026-100278 | 1 Jetbrains | 1 Youtrack | 2026-10-02 | N/A | 4.9 MEDIUM |
| In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments | |||||
| CVE-2026-95374 | 1 Google | 1 Chrome | 2026-10-02 | N/A | 6.5 MEDIUM |
| Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-104443 | 2026-10-02 | N/A | 8.1 HIGH | ||
| YesWiki before 4.6.7 contains an empty-filter scope bypass in the triples delete API that allows any authenticated user to delete or forge arbitrary semantic triples regardless of ownership. Attackers can send an empty filter to the triples delete endpoint to remove the admins-group membership triple, emptying the admin group and causing a site-wide authorization lockout. | |||||