CVE-2026-59995 sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when “sftp server:/path .” is used with an attacker-controlled server.
CVE-2026-59996 scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.
CVE-2026-59997 internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection.
CVE-2026-58525 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. Continue reading CVE-2026-58525 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2026-9080 UAF after pause in socket callback
Information published. Continue reading CVE-2026-9080 UAF after pause in socket callback
CVE-2026-8926 password leak with netrc and user in URL
Information published. Continue reading CVE-2026-8926 password leak with netrc and user in URL
CVE-2026-10536 HTTP/2 stream-dependency tree UAF
Information published. Continue reading CVE-2026-10536 HTTP/2 stream-dependency tree UAF