EUVD-2026-17983

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3.9 and 3.0.0-alpha to before 3.1.1, there is a conditional local privilege escalation vulnerability in an edge-case naming collision. Only authenticated himmelblau users whose...

CLEANSTART-2026-NN77774 Security fixes for CVE-2026-33186, ghsa-p77j-4mvh-x3m3 applied in versions: 2.4.0-r0

Multiple security vulnerabilities affect the crossplane-provider-azure package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-29598

Name of the Vulnerable Software and Affected Versions Payload versions prior to 3.78.0 Description The client-upload signed-URL endpoints for S3, GCS, Azure, and R2 did not properly sanitize filenames. An attacker could craft filenames to escape the intended storage location. Recommendations...

Himmelblau 安全漏洞

Himmelblau is an open-source Azure Entra ID authentication module developed by Himmelblau. There is a security vulnerability in Himmelblau, which stems from conditional local privilege escalation due to name conflicts in edge scenarios. If the mapped CN or short name matches the name of a...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-25645)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-25645 advisory. - Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-33343)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-33343 advisory. - etcd is a distributed key-value store for the data of a distributed system. Prior to versions...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: grafana-alloy, crossplane-provider-keycloak, crossplane-provider-azure-sql, aws-otel-collector, crossplane-provider-aws-elasticache, crossplane-provider-aws-cloudformation, crossplane-provider-aws-ec2, crossplane-provider-family-azure,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: grafana-alloy, crossplane-provider-keycloak, crossplane-provider-azure-sql, aws-otel-collector, crossplane-provider-aws-elasticache, crossplane-provider-aws-cloudformation, crossplane-provider-aws-ec2, crossplane-provider-family-azure,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-lambda, crossplane-provider-aws-rds, crossplane-provider-aws-rds-fips, crossplane-provider-aws-lambda-fips, crossplane-provider-aws-iam-fips, crossplane-provider-aws-kms-fips, nrdot-collector-k8s, crossplane-provider-aws-backup-fips,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-lambda, crossplane-provider-aws-rds, crossplane-provider-aws-rds-fips, crossplane-provider-aws-lambda-fips, crossplane-provider-aws-iam-fips, crossplane-provider-aws-kms-fips, nrdot-collector-k8s, crossplane-provider-aws-backup-fips,...

Exploit for Exposure of Resource to Wrong Sphere in Linuxfoundation Containerd

ZipSlip Container Escape Vulnerability in containerd CVE...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2025-69720)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-69720 advisory. - The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow...

CVE-2026-33980

Azure Data Explorer MCP Server is a Model Context Protocol MCP server that enables AI assistants to execute KQL queries and explore Azure Data Explorer ADX/Kusto databases through standardized interfaces. Versions up to and including 0.1.1 contain KQL Kusto Query Language injection vulnerabilitie...

hays-london-azure-platform-2-poc

Hays London Azure Platform Engineer POC — AKS Operations & Pla...

randstad-linux-azure-architect-poc

Randstad Azure Linux Architect — POC GitHub: https://gith...

[SECURITY] Fedora 44 Update: rust-reqsign-azure-storage-3.0.0-1.fc44

Azure Storage signing implementation for reqsign...

[SECURITY] Fedora 44 Update: rust-reqsign-0.20.0-1.fc44

Signing HTTP requests for AWS, Azure, Google, Huawei, Aliyun, Tencent and Oracle services...

Improper Neutralization of Special Elements in Data Query Logic

Overview adx-mcp-server is a MCP server for Azure Data Explorer integration Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic via the gettableschema, sampletabledata, and gettabledetails handlers when the tablename parameter is...

CVE-2026-33980

Azure Data Explorer MCP Server is a Model Context Protocol MCP server that enables AI assistants to execute KQL queries and explore Azure Data Explorer ADX/Kusto databases through standardized interfaces. Versions up to and including 0.1.1 contain KQL Kusto Query Language injection vulnerabilitie...

CVE-2026-33980 Azure Data Explorer MCP Server: KQL Injection in multiple tools allows MCP client to execute arbitrary Kusto queries

Azure Data Explorer MCP Server is a Model Context Protocol MCP server that enables AI assistants to execute KQL queries and explore Azure Data Explorer ADX/Kusto databases through standardized interfaces. Versions up to and including 0.1.1 contain KQL Kusto Query Language injection vulnerabilitie...