9Router <= 0.4.36 - Unauthenticated RCE

9Router = 0.4.36 middleware only guards 8 explicitly listed routes, leaving /api/cli-tools/ and /api/mcp/ entirely unauthenticated. An attacker can POST to /api/cli-tools/cowork-settings to register a custom MCP plugin with attacker-controlled command and args stored verbatim into globalThis, the...

Issabel Authenticated - Remote Code Execution

A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...

kubeshark-cli-53.4.0-1.1 on GA media (moderate)

kubeshark-cli-53.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11519-1 Rating: moderate Cross-References: CVE-2026-49445 CVSS scores: CVE-2026-49445 SUSE : 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can n...

GHSA-C974-W86C-VPFW vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, cri-tools, terraform-docs, kubevela, bento, crossplane-provider-aws-cloudformation, ferretdb, volume-modifier-for-k8s, k8ssandra-client, prometheus-operator, external-dns, kube-metrics-adapter, kubernetes-csi-driver-hostpath,...

CVE-2026-73651 vulnerabilities

Vulnerabilities for packages: redisinsight...

GO-2020-0015 vulnerabilities

Vulnerabilities for packages: k3d, vt-cli...

GO-2023-1547 vulnerabilities

Vulnerabilities for packages: helm...

GO-2024-3310 vulnerabilities

Vulnerabilities for packages: gh...

GO-2024-3269 vulnerabilities

Vulnerabilities for packages: gh...

GO-2025-3467 vulnerabilities

Vulnerabilities for packages: gh...

GO-2026-5208 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, temporal-ui-server-fips, snyk-cli, kube-metrics-adapter-fips, temporal, temporal-fips, gotenberg, fq, kube-metrics-adapter...

GO-2021-0113 vulnerabilities

Vulnerabilities for packages: gitleaks, vt-cli, terraform-provider-sendgrid-fips, hey, dynamic-localpv-provisioner-fips, k3d, dynamic-localpv-provisioner, terraform-provider-sendgrid...

GO-2026-4773 vulnerabilities

Vulnerabilities for packages: opencost, gitlab-workhorse-ce, glab, jaeger-fips, flux-operator-fips, ferretdb, osv-scanner, datadog-agent-fips, gitlab-workhorse-ce-fips, flux-operator, opencost-fips, jaeger, datadog-agent, livekit-cli...

GO-2024-3141 vulnerabilities

Vulnerabilities for packages: cosign-fips, k8sgpt, kots, conftest, cosign, kubescape, spire-server-fips, policy-controller, zarf, snyk-cli, zot, conftest-fips, spire-server, opa, policy-controller-fips, tfsec...

GO-2026-5954 vulnerabilities

Vulnerabilities for packages: kube-vip-fips, kube-vip, cilium-cli...

GO-2024-2948 vulnerabilities

Vulnerabilities for packages: grype, kots, conftest, trivy, kubescape, zarf, snyk-cli, terraform, zot, k9s, conftest-fips, trivy-fips, terragrunt, wolfictl, tfsec, tflint...

GO-2026-4736 vulnerabilities

Vulnerabilities for packages: kube-vip-fips, kube-vip, cilium-cli...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, k8sgpt, trivy, helm-push, helm-operator, kubescape, up, eksctl, zarf, cilium-cli, kubevela, zot, k9s, flux-helm-controller, chartmuseum...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, k8sgpt, trivy, helm-push, helm-operator, kubescape, up, eksctl, zarf, cilium-cli, kubevela, zot, k9s, flux-helm-controller, chartmuseum...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, flux, rancher-fleet, gitlab-operator, helm-push, cert-manager-cmctl-fips, helm-diff, kuma, rancher-fleet-fips, cilium-cli, zarf, zarf-fips, cert-manager-cmctl, gitlab-operator-fips, flux-fips, helm-diff-fips, flux-source-controller-fips...