Threats Tagged 'cve-2026-26927'
View all threats tagged with 'cve-2026-26927'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-26927'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-26927 is a medium severity vulnerability in the Szafir SDK Web browser plug-in by Krajowa Izba Rozliczeniowa. The vulnerability allows an unauthenticated attacker to manipulate the URL parameter used to launch the SzafirHost application, enabling execution with arbitrary arguments from a malicious website. The application confirmation prompt shows the attacker-supplied URL, and if the user previously allowed execution with the "remember" option, no prompt appears, allowing silent execution. This can lead to the application downloading files from attacker-controlled sources. The issue is fixed in version 0.0.17.4. Join the discussion | CVE Database V5 | 04/02/2026, 14:01:39 UTC Added: 04/02/2026, 14:23:21 UTC |
Showing 1 to 1 of 1 result