CVE ID :CVE-2026-105294 Published : Oct. 5, 2026, 1:16 a.m. | 2 hours, 11 minutes ago Description :Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any config key via the window.legcord settings.setConfig bridge....

#Sicherheitslücke #Browser

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-105294 - Legcord 1.1.0 through 1.3.0 Chromium Switch Injection via settings.setConfig

VERWANDTEARTIKEL

Citrix NetScaler SAML 0-Day Vulnerability Actively Exploited in Attacks

CVE-2026-105223 - maclof kubernetes-client 0.17.0 before 0.32.0 Disabled TLS Certificate Verification

CVE-2026-105293 - Legcord 1.1.0 through 1.3.0 Path Traversal via Theme IPC Handlers

CVE-2026-105220 - Twine 2 Desktop through 2.12.0 Arbitrary Code Execution via Imported Story Files

CVE-2026-105221 - Gist RubyGem before 6.1.0 Disabled TLS Certificate Verification

CVE-2026-105222 - alexpechkarev/google-maps through 12.16 Disabled TLS Certificate Verification via ssl_verify_peer