AZL-88296 CVE-2026-25681 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

🗓️ 22 May 2026 16:16:19Reported by GoogleType

osv🔗 osv.dev👁 4 Views

HTML parsing in sriov-network-device-plugin below 3.7.0-6 enables XSS via Render.

Reporter	Title	Published	Views	Family All 1929
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Cluster Export Services (CES) S3 are now addressed in 5.2.3.9 or higher and 6.0.1.0 or higher	24 Jul 202615:52	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in net	2 Jul 202612:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (June 2026 - Part 2 of 2)	7 Jul 202607:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Liberty Operator is affected by multiple vulnerabilities	24 Jun 202616:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/net-v0.47.0 which is vulnerable to CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821, CVE-2026-42502, CVE-2026-42506	3 Aug 202608:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in watsonx.data	21 Aug 202608:20	–	ibm
ATTACKERKB	CVE-2026-25681	22 May 202615:01	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : nerdctl (ALAS2023-2026-1788)	8 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : docker (ALAS2023-2026-1835)	12 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-1847)	22 Jun 202600:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-25681

30 Aug 2026 05:26Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.1

EPSS0.00223

SSVC

sriov-network-device-plugin HTML parsing XSS Render library