CLEANSTART-2026-KH89311 Security fixes in rancher-fleet-agent 0.15.4-r2

Package rancher-fleet-agent version 0.15.4-r2 fixes 29 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-BS31967 Security fixes in rancher-fleet-agent 0.13.13-r1

Package rancher-fleet-agent version 0.13.13-r1 fixes 34 vulnerabilities: CVE-2026-50195, CVE-2026-53492, CVE-2026-46680, CVE-2026-53488, CVE-2026-53489...

CLEANSTART-2026-OS02559 Security fixes in rancher-fleet-agent 0.16.1-r1

Package rancher-fleet-agent version 0.16.1-r1 fixes 40 vulnerabilities: CVE-2026-50195, CVE-2026-53492, CVE-2026-46680, CVE-2026-53488, CVE-2026-53489...

CLEANSTART-2026-CX57475 Security fixes in rancher-fleet-agent 0.13.13-r0

Package rancher-fleet-agent version 0.13.13-r0 fixes 39 vulnerabilities: CVE-2026-53492, CVE-2026-50195, CVE-2026-53489, CVE-2026-46680, CVE-2026-53488...

CLEANSTART-2026-QB39018 Security fixes in rancher-fleet-agent 0.14.10-r1

Package rancher-fleet-agent version 0.14.10-r1 fixes 40 vulnerabilities: CVE-2026-50195, CVE-2026-53492, CVE-2026-46680, CVE-2026-53488, CVE-2026-53489...

CLEANSTART-2026-VB09315 Security fixes in rancher-fleet-agent 0.12.17-r1

Package rancher-fleet-agent version 0.12.17-r1 fixes 40 vulnerabilities: CVE-2026-33186, ghsa-hrxh-6v49-42gf, CVE-2026-46680, CVE-2026-53488, CVE-2026-47262...

CVE-2026-84165

CVE-2026-84165 is an incorrect access control vulnerability in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4 . An authenticated user with basic permissions can execute arbitrary commands on virtual machines belonging to other users via the one.vm.exec function, which fails...

EUVD-2026-69013

A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4. This vulnerability could allow an authenticated user with basic permissions to execute commands on virtual machines belonging to other users via the one.vm.exec function,...

CVE-2026-84165 Lack of authorisation in OpenNebula by OpenNebula Systems

A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4. This vulnerability could allow an authenticated user with basic permissions to execute commands on virtual machines belonging to other users via the one.vm.exec function,...

BIT-GITLAB-2026-18252 Inclusion of Functionality from Untrusted Control Sphere in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.9 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with developer-role permissions could have executed arbitrary commands in a CI context, due to the Claude...

awesome-ai-security — Updated!

awesome-ai-security A curated list of AI Security materials and resources for Pentesters, Bug Hunters, and Security Researchers. If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the projects below,...

TencentOS Server 4: keylime-agent-rust (TSSA-2026:0891)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0891 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

PT-2026-84520

Name of the Vulnerable Software and Affected Versions NousResearch hermes-agent versions prior to 0.18.3 Description A flaw in the MCP Tool component allows for uncontrolled memory allocation. This issue occurs within the list tools function located in the tools/mcp tool.py file and can be...

CVE-2026-84288: Improper Resource Shutdown or Release

A vulnerability has been found in NousResearch hermes-agent up to 0.18.2. This affects the function HermesACPAgent.prompt of the file acpadapter/session.py of the component ACP Prompt Workflow. Such manipulation leads to denial of service. The attack may be performed from remote. The exploit has...

CVE-2026-18730: Server-Side Request Forgery (SSRF)

A server-side request forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause the Manage API to send crafted outbound requests to an attacker-controlled host. An unauthenticated endpoint parsed an attacker-supplied cluster...

CVE-2026-72682: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user holding only low, read-level Agent Builder privileges could submit a specially crafted request that causes Kibana to consume an unbounde...

PT-2026-84391

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user holding only low, read-level Agent Builder privileges could submit a specially crafted request that causes Kibana to consume an unbounde...

PT-2026-89973

Package rancher-agent version 2.13.7-r3 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

PT-2026-89959

Package newrelic-infrastructure-agent version 1.78.1-r4 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

PT-2026-84538

Name of the Vulnerable Software and Affected Versions WWBN AVideo versions e01e41ecc and earlier Description Three security controls during the login process rely exclusively on the client-supplied User-Agent header. The functions isAVideoEncoder and isAVideoMobileApp compare the HTTP USER AGENT...