CVE-2026-55226

When deploying only the Topic Operator or only the User Operator via the Kafka custom resource, the Entity Operator's ServiceAccount retains RBAC rights for both operators rather than scoping permissions to the one actually deployed. This allows the ServiceAccount to access KafkaUser custom...

PT-2026-50541

Name of the Vulnerable Software and Affected Versions Strimzi versions prior to 1.0.1 Description When deploying only the Topic Operator or only the User Operator through the Kafka custom resource, the Entity Operator ServiceAccount retains Role-Based Access Control RBAC permissions for both...

PT-2026-50540

Name of the Vulnerable Software and Affected Versions Strimzi versions prior to 1.0.1 Description When the cluster operator is deployed with watchAnyNamespace=true or a multi-namespace list, a namespace editor can manipulate the Kafka.spec.entityOperator.userOperator.watchedNamespace or...

CVE-2025-55226 Graphics Kernel Remote Code Execution Vulnerability

...

CVE-2025-55226 Graphics Kernel Remote Code Execution Vulnerability

...

CVE-2025-55226

creationtimestamp| type| source ---|---|--- 2025-09-09 16:22:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0277 2025-09-09 17:06:15+00:00| seen| https://www.thezdi.com/blog/2025/9/9/the-september-2025-security-update-review...

CVE-2024-55226

creationtimestamp| type| source ---|---|--- 2025-01-09 21:15:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113800468050519291 2025-01-09 21:16:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlzqb5m72m 2025-01-09 22:47:58+00:00| seen|...

CVE-2024-55226

Vaultwarden v1.32.5 was discovered to contain an authenticated reflected cross-site scripting XSS vulnerability via the component /api/core/mod.rs...

CVE-2024-55226

Vaultwarden v1.32.5 was discovered to contain an authenticated reflected cross-site scripting XSS vulnerability via the component /api/core/mod.rs...

CVE-2024-55226

Vaultwarden v1.32.5 was discovered to contain an authenticated reflected cross-site scripting XSS vulnerability via the component /api/core/mod.rs...

CVE-2024-55226

Vaultwarden v1.32.5 was discovered to contain an authenticated reflected cross-site scripting XSS vulnerability via the component /api/core/mod.rs...

CVE-2024-55226

Vaultwarden version v1.32.5 is affected by an authenticated reflected cross-site scripting (XSS) vulnerability located within the /api/core/mod.rs component. This flaw allows an attacker to execute malicious scripts in the context of a user's session, provided they can influence the reflected inp...