CVE ID :CVE-2026-96587 Published : Sept. 29, 2026, 8:42 p.m. | 25 minutes ago Description :The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storage, including the ability…
CVE ID :CVE-2026-94204 Published : Sept. 29, 2026, 8:40 p.m. | 27 minutes ago Description :The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unrestricted access to all stored objects. Because this bucket serves…
CVE ID :CVE-2026-96274 Published : Sept. 29, 2026, 8:17 p.m. | 50 minutes ago Description :In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because…
CVE ID :CVE-2026-76724 Published : Sept. 29, 2026, 8:17 p.m. | 50 minutes ago Description :A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to perform command injection…
CVE ID :CVE-2026-76725 Published : Sept. 29, 2026, 8:17 p.m. | 50 minutes ago Description :A vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication…
CVE ID :CVE-2026-95357 Published : Sept. 29, 2026, 6:17 p.m. | 49 minutes ago Description :Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the…
CVE ID :CVE-2026-95350 Published : Sept. 29, 2026, 6:17 p.m. | 49 minutes ago Description :Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a…
CVE ID :CVE-2026-95339 Published : Sept. 29, 2026, 6:17 p.m. | 49 minutes ago Description :Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML…
CVE ID :CVE-2026-84842 Published : Sept. 29, 2026, 6:17 p.m. | 50 minutes ago Description :IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this…
CVE ID :CVE-2026-84436 Published : Sept. 29, 2026, 6:17 p.m. | 50 minutes ago Description :IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands…