CVE-2026-53219 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-aws, linux-gcp, linux-azure, linux-vmware...

CVE-2026-53217 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-aws, linux-gcp, linux-azure, linux-vmware...

CVE-2026-53205 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-aws, linux-gcp, linux-azure, linux-vmware...

CVE-2026-53207 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-aws, linux-gcp, linux-azure, linux-vmware...

CVE-2026-53208 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-aws, linux-gcp, linux-azure, linux-vmware...

CVE-2026-53218 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-aws, linux-gcp, linux-azure, linux-vmware...

CVE-2026-53230 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-aws, linux-gcp, linux-azure, linux-vmware...

CVE-2026-53214 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-aws, linux-gcp, linux-azure, linux-vmware...

CVE-2026-53220 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-aws, linux-gcp, linux-azure, linux-vmware...

CVE-2026-53223 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-aws, linux-gcp, linux-azure, linux-vmware...

CVE-2026-53215 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-aws, linux-gcp, linux-azure, linux-vmware...

CVE-2026-45850 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-aws, linux-gcp, linux-azure, linux-vmware...

CVE-2026-53221 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-aws, linux-gcp, linux-azure, linux-vmware...

CVE-2026-46354

Coder allows organizations to provision remote development environments via Terraform. In versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, and 2.33.3, azureidentity.Validate verifies that the PKCS7 signer certificate chains to a trusted Azure CA but never verifies the PKCS7 signature...

CVE-2026-45796

Coder allows organizations to provision remote development environments via Terraform. Versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, and 2.33.3 are vulnerable to unauthenticated semi-blind Server-Side Request Forgery SSRF via the Azure instance identity endpoint POST...

CVE-2026-46354 Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft

Coder allows organizations to provision remote development environments via Terraform. In versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, and 2.33.3, azureidentity.Validate verifies that the PKCS7 signer certificate chains to a trusted Azure CA but never verifies the PKCS7 signature...

EUVD-2026-42111

Coder allows organizations to provision remote development environments via Terraform. In versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, and 2.33.3, azureidentity.Validate verifies that the PKCS7 signer certificate chains to a trusted Azure CA but never verifies the PKCS7 signature...

CVE-2026-46354 Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft

Coder allows organizations to provision remote development environments via Terraform. In versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, and 2.33.3, azureidentity.Validate verifies that the PKCS7 signer certificate chains to a trusted Azure CA but never verifies the PKCS7 signature...

CVE-2026-46354

Summary: A PKCS#7 signature bypass in Coder (Coder v2 before patches) allows unauthenticated token theft via Azure instance identity. The issue stems from azureidentity.Validate() validating only the signer certificate chain, not the signature itself, enabling forged PKCS#7 envelopes containing a...

CVE-2026-46354 Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft

Coder allows organizations to provision remote development environments via Terraform. In versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, and 2.33.3, azureidentity.Validate verifies that the PKCS7 signer certificate chains to a trusted Azure CA but never verifies the PKCS7 signature...