GO-2024-3110 vulnerabilities

Vulnerabilities for packages: grype, ctop, cadvisor, docker, grafana-alloy, podman, runc, neuvector-scanner, k8s-device-plugin, buildah, syft, k3s, kubernetes, opentelemetry-collector-contrib...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: cadvisor, podman, docker-machine-driver-harvester, nvidia-container-toolkit, k8s-device-plugin, sriov-network-device-plugin, buildah, falco-no-driver, node-feature-discovery...

GO-2025-4097 vulnerabilities

Vulnerabilities for packages: podman, grafana-alloy, nvidia-container-toolkit, sriov-network-device-plugin, buildah, falco-no-driver, node-feature-discovery, k3s, kubernetes...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, cri-tools, kubernetes-dns-node-cache, argocd-image-updater, nodetaint, k8s-device-plugin, local-static-provisioner, kubernetes-csi-driver-hostpath, ip-masq-agent, spark-operator, aws-efs-csi-driver...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, gitness, runc, wuzz, fuse-overlayfs-snapshotter, k8s-device-plugin, k3s...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubernetes-dns-node-cache, argocd-image-updater, nodetaint, k8s-device-plugin, local-static-provisioner, ip-masq-agent, aws-efs-csi-driver...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, gitness, runc, wuzz, fuse-overlayfs-snapshotter, k8s-device-plugin, k3s...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: argo-cd, karpenter, istio, redka, kubescape, external-secrets-operator, aws-flb-cloudwatch, gitlab-kas, gitlab-pages, k3s, kube-fluentd-operator, kubernetes, helm, gitaly, kots, cilium-cli, k8s-device-plugin, chezmoi, falco-no-driver, dask-gateway, prometheus-operato...

PT-2026-72031

Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the...

PT-2026-72033

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the event notification functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to corrupt kernel heap and...

GLSA-202608-08 : libinput: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-08 libinput: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in libinput. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...

CVE-2026-47766: UNIX Symbolic Link (Symlink) Following

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

CVE-2026-13198: Concurrent Execution using Shared Resource with Improper Synchronization

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the event notification functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to corrupt kernel heap and...

CVE-2026-18164

creationtimestamp| type| source ---|---|--- 2026-08-13 20:15:03+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-225-01...

EUVD-2026-58240

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker v2.0.22 that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights...

CVE-2026-73669 Signify Philips Hue Bridge Pro MQTT broker missing authentication

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker service that listens on all network interfaces without authentication. An unauthenticated attacker with network access to the MQTT service on a vulnerable system can read data and control connected lights. Fixed in...

SUSE CVE-2026-68163

In the Linux kernel, the following vulnerability has been resolved: mm/pagevmamapped: fix device-private PMD handling Commit 65edfda6f3f2 "mm/rmap: extend rmap and migration support device-private entries" introduced the concept of device-private PMD entries, but did not correctly update the rmap...

SUSE CVE-2026-68178

In the Linux kernel, the following vulnerability has been resolved: misc: nsm: pin the module while the device is open miscopen installs a misc driver's file operations with fopsget, which pins fileoperations::owner before replacing the file's fop. The NSM misc device leaves nsmdevfops.owner unse...

SUSE CVE-2026-68180

In the Linux kernel, the following vulnerability has been resolved: intelth: fix MSC output device reference leak intelthoutputopen looks up the output device with busfinddevicebydevt, which returns the device with a reference that must be dropped after use. commit 95fc36a234da "intelth: fix devi...

SUSE CVE-2026-68212

In the Linux kernel, the following vulnerability has been resolved: media: saa7134: Fix a possible memory leak in saa7134videoinit1 In saa7134videoinit1, the return value of the first saa7134pgtablealloc is not checked. If it fails, the function continues as if successful, leaving the driver with...