GO-2026-6605 vulnerabilities

Vulnerabilities for packages: delve, azuredisk-csi, volume-modifier-for-k8s, crossplane-provider-aws-cloudwatchlogs, grafana-rollout-operator, kube-arangodb, rancher, kube-state-metrics, nats, loki, whereabouts, postgres-operator, falco-no-driver, crossplane-provider-aws-elasticache, grafana,...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: kube-arangodb, external-dns, rancher, spire-server, gitness, loki, headlamp, yunikorn-web, falco-no-driver, prometheus-adapter, step, grafana, hubble-ui, atlantis, continuity, filebrowser, ingress-nginx-controller, rclone, zarf, mesosphere-vsphere-csi, terragrunt,...

GHSA-874M-FCC5-9GQF vulnerabilities

Vulnerabilities for packages: delve, azuredisk-csi, volume-modifier-for-k8s, crossplane-provider-aws-cloudwatchlogs, grafana-rollout-operator, kube-arangodb, rancher, kube-state-metrics, nats, loki, whereabouts, postgres-operator, falco-no-driver, crossplane-provider-aws-elasticache, grafana,...

GHSA-2GFW-J3C5-J46W vulnerabilities

Vulnerabilities for packages: delve, azuredisk-csi, volume-modifier-for-k8s, crossplane-provider-aws-cloudwatchlogs, grafana-rollout-operator, kube-arangodb, rancher, kube-state-metrics, nats, loki, whereabouts, postgres-operator, falco-no-driver, crossplane-provider-aws-elasticache, grafana,...

GO-2026-6600 vulnerabilities

Vulnerabilities for packages: azuredisk-csi, volume-modifier-for-k8s, crossplane-provider-aws-cloudwatchlogs, grafana-rollout-operator, kube-arangodb, rancher, kube-state-metrics, loki, falco-no-driver, crossplane-provider-aws-elasticache, grafana, coredns, external-secrets-operator, rook,...

CVE-2026-97030 vulnerabilities

Vulnerabilities for packages: azuredisk-csi, volume-modifier-for-k8s, crossplane-provider-aws-cloudwatchlogs, grafana-rollout-operator, kube-arangodb, rancher, kube-state-metrics, loki, falco-no-driver, crossplane-provider-aws-elasticache, grafana, coredns, external-secrets-operator, rook,...

GHSA-C3Q7-M35P-9QQ7 vulnerabilities

Vulnerabilities for packages: flux, cert-manager, external-dns, kubernetes, spire-server, aactl, loki, ingress-nginx-controller, falco-no-driver, k8s-device-plugin...

CVE-2026-94439 vulnerabilities

Vulnerabilities for packages: delve, azuredisk-csi, volume-modifier-for-k8s, crossplane-provider-aws-cloudwatchlogs, grafana-rollout-operator, kube-arangodb, rancher, kube-state-metrics, nats, loki, whereabouts, postgres-operator, falco-no-driver, crossplane-provider-aws-elasticache, grafana,...

CVE-2026-94440 vulnerabilities

Vulnerabilities for packages: delve, azuredisk-csi, volume-modifier-for-k8s, crossplane-provider-aws-cloudwatchlogs, grafana-rollout-operator, kube-arangodb, rancher, kube-state-metrics, nats, loki, whereabouts, postgres-operator, falco-no-driver, crossplane-provider-aws-elasticache, grafana,...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: flux, cert-manager, external-dns, kubernetes, spire-server, aactl, loki, ingress-nginx-controller, falco-no-driver, k8s-device-plugin...

AZL-107183 CVE-2026-97032 affecting package cert-manager 1.12.15-14

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107189 CVE-2026-78669 affecting package cert-manager 1.12.15-14

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

AZL-107192 CVE-2026-78663 affecting package cert-manager 1.12.15-14

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

AZL-107186 CVE-2026-78660 affecting package cert-manager 1.12.15-14

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

AZL-107180 CVE-2026-78659 affecting package cert-manager 1.12.15-14

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

vcenter_saml_login

Strumento di Accesso SAML per vCenter Uno strumento per estrarre il certificato dell'Identity Provider IdP dai backup di vCenter e accedere come Administrator Contesto Comunemente, durante gli engagement, otteniamo accesso ai backup di vCenter su un file server o accesso root all'host VCSA tramit...

AZL-107195 CVE-2026-92543 affecting package cert-manager 1.12.15-14

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Becau...

tomcat: Apache Tomcat: Improper Authentication due to principal lookup failure

A flaw was found in Apache Tomcat. This improper authentication vulnerability allows a remote attacker to be authenticated even if their user account does not exist in the DataSourceRealm, under specific circumstances such as CLIENT-CERT or SPNEGO authentication. This can lead to unauthorized...

tomcat: Apache Tomcat: Improper Authentication due to principal lookup failure

A flaw was found in Apache Tomcat. This improper authentication vulnerability allows a remote attacker to be authenticated even if their user account does not exist in the DataSourceRealm, under specific circumstances such as CLIENT-CERT or SPNEGO authentication. This can lead to unauthorized...

IRM

IRM-2022 Metodologie di Incident Response 2022 CERT Societe Generale, in collaborazione con CERT aDvens, fornisce best practice operative per incidenti di facile utilizzo. Questi cheat sheet sono dedicati alla gestione degli incidenti e coprono molteplici ambiti in cui un team CERT può essere...