Known Vulnerabilities for Canvas by Coolpad
Listed below are 1 of the newest known vulnerabilities associated with "Canvas" by "Coolpad".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-101883 json | OpenClaw Windows Node through 2026.9.4 contains a server-side request forgery vulnerability in the canvas.present capability ... | Not Provided | 2026-09-30 | 2026-10-02 |
| CVE-2026-100554 json | OpenClaw (npm package 'openclaw') versions >= 2026.5.12 and < 2026.8.1 do not immediately invalidate Canvas HTTP authorizatio... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-94094 json | A flaw has been found in OpenClaw up to 2026.9.5. Affected is the function createCanvasHostHandler of the file extensions/can... | Not Provided | 2026-09-20 | 2026-09-22 |
| CVE-2026-93660 json | SQLBot through 1.10.1 fails to verify dashboard ownership in update_resource and update_canvas endpoints, allowing authentica... | Not Provided | 2026-09-18 | 2026-09-22 |
| CVE-2026-92214 json | A flaw has been found in a2ui-project a2ui up to 0.10.7. Affected is an unknown function of the file samples/community/client... | Not Provided | 2026-09-16 | 2026-09-22 |
| CVE-2026-86487 json | In JetBrains YouTrack before 2026.2.18634 a crafted WebSocket message allowed read-only whiteboard users to modify canvas con... | Not Provided | 2026-09-07 | 2026-09-08 |
| CVE-2026-81207 json | IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant — with no project membership or role — fully ... | Not Provided | 2026-09-10 | 2026-09-11 |
| CVE-2026-79193 json | Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a ... | Not Provided | 2026-08-25 | 2026-08-26 |
| CVE-2026-78987 json | Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via ... | Not Provided | 2026-08-25 | 2026-08-27 |
| CVE-2026-78908 json | Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via ... | Not Provided | 2026-08-25 | 2026-08-27 |