Google Chrome 157 has been released with patches for 213 security vulnerabilities, including seven critical memory safety bugs. These critical issues include buffer overflows and use-after-free defects in components such as Dawn (WebGPU implementation) and ANGLE (graphics engine abstraction). The update also addresses numerous high-severity vulnerabilities involving authorization errors, memory corruption, and information leaks. No exploitation in the wild has been reported. Users are advised to update to the latest Chrome versions promptly to mitigate these risks.
CVE-2026-114425 is a critical vulnerability in SEPPmail Secure Email Gateway (SEG) versions before 15.1.1. It involves external control of file name or path via Large File Transfer (LFT) attachment metadata. An unauthenticated remote sender can exploit this flaw to cause the mail-processing worker, which runs as root, to disclose, move, or delete accessible regular files when LFT is enabled and the message is processed by the affected secure-mail path. This vulnerability is fixed in version 15.1.1.
SEPPmail Secure Email Gateway versions before 15.1.1 contain a critical eval injection vulnerability (CWE-95) that allows unauthenticated remote attackers to execute arbitrary operating system commands as root. This occurs when attacker-controlled replacement text in sender or recipient replacement rules is evaluated as Perl code in the mail-processing worker context. The vulnerability is fixed in version 15.1.1.
Multiple critical authentication bypass vulnerabilities have been identified in the pyjwt library used by the fence-agents packages in Red Hat Enterprise Linux 10.0 Extended Update Support. These vulnerabilities include acceptance of empty HMAC keys, improper public key validation, acceptance of DER public keys as HMAC secrets, unvalidated JWKS redirects, and token forgery via improper Unicode byte-order mark handling. The fence-agents packages are used for remote power management in cluster environments, allowing forced restart and removal of failed or unreachable nodes.
This Red Hat Security Advisory addresses multiple critical vulnerabilities and bug fixes in the Linux kernel packages for Red Hat Enterprise Linux 8.6. The update includes patches for several security issues such as improper list handling, missing RCU protection, out-of-bounds writes, denial of service, memory disclosure, and local privilege escalation. The advisory emphasizes the critical nature of these fixes due to the kernel's fundamental role in system security and recommends prompt application of the update and system reboot.
A critical stack-based buffer overflow vulnerability exists in TOTOLINK A950RG firmware version 4.1.2cu.5268_B20221104, specifically in the Multi-SSID Configuration component's setWiFiMultipleConfig/delWiFiMultipleConfig functions. The flaw is triggered by manipulating the wepkey2/wepkey3 arguments via the /cgi-bin/cstecgi.cgi interface. Remote attackers can exploit this vulnerability without user interaction. Public exploit code is available.
A critical stack-based buffer overflow vulnerability exists in the TOTOLINK A950RG firmware version 4.1.2cu.5268_B20221104. The flaw is in the strcpy function within /cgi-bin/cstecgi.cgi, specifically in the Basic Wireless Configuration Handler component when processing the 'wepkey' argument. This vulnerability can be exploited remotely without user interaction and has a public exploit disclosed.
A critical stack-based buffer overflow vulnerability exists in the TOTOLINK A950RG firmware version 4.1.2cu.5268_B20221104, specifically in the setMacFilterRules function of the MAC Filter Handler component. This flaw can be exploited remotely via manipulation of the addEffect argument. Public exploit code is available, and the vulnerability has a CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability.
@better-auth/expo before 1.7.16 allows certain account-takeover outcomes (e.g., unauthenticated changes of any account's email address), because it signs a caller-supplied state value without checking whether that value had been issued by the server. NOTE: the application secret must be rotated after updating to a fixed version.
CVE-2026-121615 is a critical improper authentication vulnerability in Linksys E5600 version 1.1.0.26. It affects an unknown function in the /cgi-bin/mesh_login.cgi login handler component. The flaw allows remote attackers to bypass authentication controls. The vulnerability has been publicly disclosed with exploit details available. The affected product is no longer supported by the vendor, and no response or patch has been provided.
CVE-2026-121609 is a critical vulnerability in Qihoo 360 Whole Home Router M5 version 4.0.17.1566. It involves hard-coded credentials in the boot script component, specifically in the Home function of /etc/init.d/mpt. This flaw allows remote attackers to exploit the device without any privileges or user interaction. Public exploit code is available, increasing the risk of exploitation. The vendor has not responded to disclosure attempts, and no patch information is provided.
CVE-2026-121607 is a critical OS command injection vulnerability in Qihoo 360 devices D603-2, D600-2, D606-6, and D706 up to version 6.4.9. The flaw exists in the testspeed_command function within the /fs2/bin/iscm file, where manipulation of the host argument allows remote attackers to execute arbitrary OS commands. The vulnerability has a maximum CVSS 4.0 score of 10.0, indicating severe impact. Public exploit code is available, but there is no vendor response or patch released at this time.
CVE-2026-121606 is a critical vulnerability in Qihoo 360 devices including models D621-2, D603-2, D600-2, D619, D606-6, and D706 running firmware versions 6.4.0 through 6.4.9. The flaw exists in the Firmware Signature Verification component, specifically in the verify_sign function, where improper verification of cryptographic signatures occurs due to manipulation of the signature argument. This vulnerability can be exploited remotely without any privileges or user interaction. Public exploit code has been disclosed, but the vendor has not responded or issued a fix.