CVE ID :CVE-2026-55587 Published : Oct. 15, 2026, 7:17 p.m. | 16 minutes ago Description :AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.29.4, the AliasVault browser extension passkey provider does not bind passkey requests to the actual webpage origin...

#Sicherheitslücke #Browser

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-55587 - AliasVault: Browser extension WebAuthn bridge accepts forged origin/RP ID

VERWANDTEARTIKEL

CVE-2026-96620 - Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution

CVE-2026-30971 - ZoneMinder: Authenticated RCE via command injection in monitor Device Path

CVE-2026-61726 - Tandoor Recipes: Private recipe authorization bypass via /api/step/ - read and modify another Space member's private recipe content

CVE-2026-102607 - ZoneMinder: Authenticated OS Command Injection (RCE) via Export Feature

CVE-2026-102608 - ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php)

Critical BlockStrap flaw lets hackers run code on Magento servers