CVE-2026-55166 Lemur: any SSO-authenticated user achieves AWS IAM compromise and permanent PKI key access via ACME acme_url SSRF and creator-equality IDOR

Lemur manages TLS certificate creation. Prior to 1.9.2, authenticated users could influence an ACME authority acmeurl without an effective server-side destination restriction and trigger AcmeHandler.setupacmeclient to make backend requests. An attacker could target cloud instance metadata or...

CVE-2026-55166 Lemur: any SSO-authenticated user achieves AWS IAM compromise and permanent PKI key access via ACME acme_url SSRF and creator-equality IDOR

Lemur manages TLS certificate creation. Prior to 1.9.2, authenticated users could influence an ACME authority acmeurl without an effective server-side destination restriction and trigger AcmeHandler.setupacmeclient to make backend requests. An attacker could target cloud instance metadata or...

CVE-2026-55166

A low-privilege SSO-authenticated user chains three flaws in Netflix Lemur prior to 1.9.2: an unfiltered acme_url SSRF to AWS IMDS (CWE-918) exfiltrates worker STS credentials, while a creator-equality IDOR (CWE-639) at certificates/views.py:734 grants permanent private-key access after ownership...

USN-8629-2 linux-aws-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Network traffic control; - IPv4 networking; - IPv6...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: grpcurl, harbor-registry, buildkitd, kuberlr, spire-controller-manager, cloud-provider-vsphere, dive, dapr, terraform-provider-grafana, cloud-sql-proxy, rancher-telemetry, grafana-agent-operator, kubernetes-csi-external-snapshotter, kubernetes-dns-node-cache,...

GO-2026-6218 vulnerabilities

Vulnerabilities for packages: grpcurl, harbor-registry, buildkitd, kuberlr, spire-controller-manager, cloud-provider-vsphere, dive, dapr, terraform-provider-grafana, cloud-sql-proxy, rancher-telemetry, grafana-agent-operator, kubernetes-csi-external-snapshotter, kubernetes-dns-node-cache,...

GO-2026-5575 vulnerabilities

Vulnerabilities for packages: kyverno, kyverno-notation-aws-fips, kyverno-notation-aws...

GO-2025-3652 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

GO-2026-5371 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, kyverno-notation-aws...

GO-2026-5594 vulnerabilities

Vulnerabilities for packages: kyverno, kyverno-fips, kyverno-notation-aws-fips, kyverno-notation-aws...

GO-2026-5374 vulnerabilities

Vulnerabilities for packages: kyverno, kyverno-fips, kyverno-notation-aws-fips, kyverno-notation-aws...

GO-2026-5337 vulnerabilities

Vulnerabilities for packages: kyverno, kyverno-fips, kyverno-notation-aws-fips, kyverno-notation-aws...

GO-2026-5351 vulnerabilities

Vulnerabilities for packages: kyverno, kyverno-fips, kyverno-notation-aws-fips, kyverno-notation-aws...

GO-2026-5621 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips...

GO-2026-5268 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, kyverno-notation-aws...

GO-2025-3823 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, kyverno-notation-aws...

GO-2025-3562 vulnerabilities

Vulnerabilities for packages: kyverno-fips, kyverno-notation-aws-fips, kyverno, commercial-kyverno, kyverno-notation-aws...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: boring-registry-fips, gitlab-cng, grafana-fips, jitsucom-bulker, tkn-fips, beats-fips, rancher-security-scan, gitlab-cng-fips, zitadel, bank-vaults, ratify-fips, kyverno, beats, pluto-fips, docker-compose-fips, grafana, istio-fips, k9s-fips, kyverno-notation-aws-fips...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, cert-manager-google-cas-issuer, opentelemetry-operator, opentelemetry-operator-fips, cert-manager-istio-csr-fips, aws-privateca-issuer, step-issuer, gitlab-operator-fips, cert-manager-webhook-pdns, gitlab-operator, cert-manager-openshift-routes-fips...

GO-2026-4316 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler, kyverno-fips, custom-pod-autoscaler-fips, cloudbeat, aws-lambda-runtime-interface-emulator, aws-lambda-runtime-interface-emulator-fips, commercial-kyverno, fleet-server-fips, cloudbeat-fips...