VULNERABILITY INTELLIGENCE

CVE-2026-11276

CVSS score5.1 MEDIUM
EPSS probability0.08%
CISA KEVNot currently listed
Published2026-06-05
Last modified2026-07-23
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

Inappropriate implementation in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to bypass discretionary access control via malicious network traffic. (Chromium security severity: Low)

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-269

Primary references