Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-17792 1 Google 1 Chrome 2026-07-31 6.5 Medium
Inappropriate implementation in Credential Management in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-59309 1 Vmware 5 Cloud Foundation, Telco Cloud Infrastructure, Telco Cloud Platform and 2 more 2026-07-30 9.8 Critical
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system.
CVE-2026-56850 2 Nodejs, Redhat 2 Nodejs, Hummingbird 2026-07-30 4.1 Medium
A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.