🚨 EUVD-2026-97115 📊 7.8/10 🏢 zephyrproject 📝 The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c passed the caller's byte count straight to the vendor SDK routine TRNG_GetRa... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97115 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97104 📊 3.4/10 🏢 zephyrproject 📝 The zbus proxy agent IPC backend in subsys/zbus/proxy_agent/zbus_proxy_agent_ipc.c logged the channel name of a rejected inter-domain frame with a p... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97104 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97105 📊 5.5/10 🏢 zephyrproject 📝 i2s_esp32_trigger_check() in drivers/i2s/i2s_esp32.c validates the requested direction only for I2S_DIR_BOTH. The I2S_DIR_RX and I2S_DIR_TX branches... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97105 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97106 📊 7.5/10 🏢 zephyrproject 📝 The Bluetooth LE host queues received L2CAP connection-oriented channel (CoC) data for deferred processing through a struct k_work embedded in the c... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97106 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97107 📊 6.5/10 🏢 zephyrproject 📝 The Bluetooth Link Layer Control Procedure (LLCP) implementation for Connected Isochronous Stream (CIS) creation retains an RX node (ctx->node_ref.r... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97107 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97108 📊 6.5/10 🏢 zephyrproject 📝 The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c retains the received RX node while a Connec... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97108 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97109 📊 6.5/10 🏢 zephyrproject 📝 The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains the receive node that carried an accep... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97109 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97110 📊 5.9/10 🏢 Interuse 📝 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos. This issue affects i-Bos: 3.0. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97110 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-93805 📊 4.2/10 🏢 Google 📝 Missing authorization in Translate in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass sit... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93805 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-93815 📊 5.4/10 🏢 Google 📝 Improper input validation in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypas... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93815 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-93856 📊 6.5/10 🏢 Google 📝 Missing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93856 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-93682 📊 4.2/10 🏢 Google 📝 Missing authorization in BrowserTag in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leverage... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93682 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97100 📊 5.3/10 🏢 gitroomhq 📝 Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs. Two of them include... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97100 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97101 📊 7.1/10 🏢 Omarchy 📝 omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into ~/.local/state/omarchy/current/the... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97101 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97038 📊 5.3/10 🏢 zhayujie 📝 A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /upload of the component Web Conso... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97038 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97039 📊 5.3/10 🏢 zhayujie 📝 A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Media Download ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97039 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97040 📊 5.3/10 🏢 jeecgboot 📝 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows authenticated users to read any account's permissions via the queryUs... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97040 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97041 📊 5.3/10 🏢 jeecgboot 📝 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController getUserRoleSetById handler that allows any authenticat... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97041 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97042 📊 5.3/10 🏢 jeecgboot 📝 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to publish templated system announcements via ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97042 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97043 📊 5.3/10 🏢 jeecgboot 📝 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to send system announcements by ca... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97043 #cybersecurity #infosec #cve #euvd