CLEANSTART-2026-ZU67009 Security fixes in rancher-agent 2.14.3-r0

Package rancher-agent version 2.14.3-r0 fixes 17 vulnerabilities: CVE-2026-53492, CVE-2026-50195, CVE-2026-46680, CVE-2026-53488, ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-QB39018 Security fixes in rancher-fleet-agent 0.14.10-r1

Package rancher-fleet-agent version 0.14.10-r1 fixes 40 vulnerabilities: CVE-2026-50195, CVE-2026-53492, CVE-2026-46680, CVE-2026-53488, CVE-2026-53489...

CLEANSTART-2026-CX57475 Security fixes in rancher-fleet-agent 0.13.13-r0

Package rancher-fleet-agent version 0.13.13-r0 fixes 39 vulnerabilities: CVE-2026-53492, CVE-2026-50195, CVE-2026-53489, CVE-2026-46680, CVE-2026-53488...

CLEANSTART-2026-PO42401 Security fixes in rancher-fleet-agent 0.15.4-r1

Package rancher-fleet-agent version 0.15.4-r1 fixes 39 vulnerabilities: CVE-2026-53492, CVE-2026-50195, CVE-2026-53489, CVE-2026-46680, CVE-2026-53488...

CLEANSTART-2026-BS31967 Security fixes in rancher-fleet-agent 0.13.13-r1

Package rancher-fleet-agent version 0.13.13-r1 fixes 34 vulnerabilities: CVE-2026-50195, CVE-2026-53492, CVE-2026-46680, CVE-2026-53488, CVE-2026-53489...

CLEANSTART-2026-GU39170 Security fixes in amazon-cloudwatch-agent 1.300070.0-r1

Package amazon-cloudwatch-agent version 1.300070.0-r1 fixes 37 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-XT48985 Security fixes in rancher-agent 2.12.11-r1

Package rancher-agent version 2.12.11-r1 fixes 18 vulnerabilities: CVE-2026-50195, CVE-2026-53492, CVE-2026-53489, CVE-2026-46680, CVE-2026-53488...

CVE-2026-84165 Lack of authorisation in OpenNebula by OpenNebula Systems

A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4. This vulnerability could allow an authenticated user with basic permissions to execute commands on virtual machines belonging to other users via the one.vm.exec function,...

CVE-2026-84165

CVE-2026-84165 is an incorrect access control vulnerability in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4 . An authenticated user with basic permissions can execute arbitrary commands on virtual machines belonging to other users via the one.vm.exec function, which fails...

EUVD-2026-69013

A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4. This vulnerability could allow an authenticated user with basic permissions to execute commands on virtual machines belonging to other users via the one.vm.exec function,...

BIT-GITLAB-2026-18252 Inclusion of Functionality from Untrusted Control Sphere in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.9 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with developer-role permissions could have executed arbitrary commands in a CI context, due to the Claude...

awesome-ai-security — Updated!

awesome-ai-security A curated list of AI Security materials and resources for Pentesters, Bug Hunters, and Security Researchers. If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the projects below,...

TencentOS Server 4: keylime-agent-rust (TSSA-2026:0891)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0891 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

PT-2026-84520

Name of the Vulnerable Software and Affected Versions NousResearch hermes-agent versions prior to 0.18.3 Description A flaw in the MCP Tool component allows for uncontrolled memory allocation. This issue occurs within the list tools function located in the tools/mcp tool.py file and can be...

CVE-2026-84288: Improper Resource Shutdown or Release

A vulnerability has been found in NousResearch hermes-agent up to 0.18.2. This affects the function HermesACPAgent.prompt of the file acpadapter/session.py of the component ACP Prompt Workflow. Such manipulation leads to denial of service. The attack may be performed from remote. The exploit has...

CVE-2026-18730: Server-Side Request Forgery (SSRF)

A server-side request forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause the Manage API to send crafted outbound requests to an attacker-controlled host. An unauthenticated endpoint parsed an attacker-supplied cluster...

PT-2026-89959

Package newrelic-infrastructure-agent version 1.78.1-r4 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

PT-2026-89963

Package newrelic-infrastructure-agent version 1.78.1-r2 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

PT-2026-84514

Name of the Vulnerable Software and Affected Versions hermes-agent version 0.18.0 Description A flaw in the Session Chat Interface component, specifically within the gateway/platforms/api server.py file, allows a remote attacker to cause a denial of service. Recommendations At the moment, there i...

PT-2026-84515

Name of the Vulnerable Software and Affected Versions hermes-agent versions prior to 0.18.3 Description A remote denial of service issue exists within the ACP Prompt Workflow component. The flaw is located in the HermesACPAgent.prompt function within the acp adapter/session.py file, where imprope...