CVE-2026-27136 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-4

CVE-2026-27136 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-4. A patched version of the package is available...

CVE-2026-27136 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-27136 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-27136 affecting package multus for versions less than 4.0.2-8

CVE-2026-27136 affecting package multus for versions less than 4.0.2-8. A patched version of the package is available...

CVE-2026-27136 affecting package cloud-provider-kubevirt for versions less than 0.5.1-4

CVE-2026-27136 affecting package cloud-provider-kubevirt for versions less than 0.5.1-4. A patched version of the package is available...

CVE-2026-27136 affecting package docker-compose for versions less than 2.27.0-11

CVE-2026-27136 affecting package docker-compose for versions less than 2.27.0-11. A patched version of the package is available...

CVE-2026-27136 affecting package telegraf for versions less than 1.31.0-21

CVE-2026-27136 affecting package telegraf for versions less than 1.31.0-21. A patched version of the package is available...

CVE-2026-27136 affecting package keda for versions less than 2.14.1-13

CVE-2026-27136 affecting package keda for versions less than 2.14.1-13. A patched version of the package is available...

CVE-2026-27136 affecting package cf-cli for versions less than 8.7.11-6

CVE-2026-27136 affecting package cf-cli for versions less than 8.7.11-6. A patched version of the package is available...

CVE-2026-27136 affecting package containerd2 for versions less than 2.1.6-3

CVE-2026-27136 affecting package containerd2 for versions less than 2.1.6-3. A patched version of the package is available...

CVE-2026-27136 affecting package docker-buildx for versions less than 0.14.0-13

CVE-2026-27136 affecting package docker-buildx for versions less than 0.14.0-13. A patched version of the package is available...

BELL-CVE-2026-27136

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2026-27136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications...

CVE-2026-27136

creationtimestamp| type| source ---|---|--- 2026-05-22 17:08:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhge7mzxk2k 2026-06-29 16:07:21+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpgunn2jyy2w 2026-06-29 16:07:27+00:00| seen|...

CVE-2026-27136

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

CVE-2026-27136 Invoking duplicate attributes can cause XSS in golang.org/x/net/html

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

CVE-2024-27136

creationtimestamp| type| source ---|---|--- 2025-03-20 18:20:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8246...

CVE-2025-27136

creationtimestamp| type| source ---|---|--- 2025-03-10 19:38:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7039 2025-03-10 23:13:53+00:00| seen| https://t.me/cvedetector/19995 2025-07-24 15:47:44+00:00| published-proof-of-concept|...

CVE-2025-27136

LocalS3 is an Amazon S3 mock service for testing and local development. Prior to version 1.21, the LocalS3 service's bucket creation endpoint is vulnerable to XML External Entity XXE injection. When processing the CreateBucketConfiguration XML document during bucket creation, the service's XML...

CVE-2024-27136

XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.2 or later...

CVE-2024-27136 Apache JSPWiki: Cross-site scripting vulnerability on upload page

XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.2 or later...