CVE-2026-94448 vulnerabilities

Vulnerabilities for packages: grafana-cloudmonitoring-datasource-fips, azure-metrics-exporter-fips, crossplane-provider-aws-mediastore-fips, harbor, ory-keto, trivy-operator, temporal-fips, crossplane-provider-family-aws-fips, consul-k8s-fips, cert-manager-istio-csr, trivy,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: git-lfs-fips, consul-k8s-fips, cert-manager-istio-csr, rabbitmq-default-user-credential-updater-fips, actions-runner-controller, crossplane-provider-aws-glacier-fips, kubevirt-cdi-operator, kubevirt-cdi-operator-fips, databricks-cli-fips,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: git-lfs-fips, harbor, consul-k8s-fips, cert-manager-istio-csr, rabbitmq-default-user-credential-updater-fips, actions-runner-controller, crossplane-provider-aws-glacier-fips, grafana-opentsdb-datasource-fips, kubevirt-cdi-operator, falcosidekick-ui,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: git-lfs-fips, harbor, consul-k8s-fips, cert-manager-istio-csr, rabbitmq-default-user-credential-updater-fips, actions-runner-controller, crossplane-provider-aws-glacier-fips, grafana-opentsdb-datasource-fips, kubevirt-cdi-operator, falcosidekick-ui,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: git-lfs-fips, harbor, consul-k8s-fips, cert-manager-istio-csr, rabbitmq-default-user-credential-updater-fips, actions-runner-controller, crossplane-provider-aws-glacier-fips, grafana-opentsdb-datasource-fips, kubevirt-cdi-operator, falcosidekick-ui,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: git-lfs-fips, harbor, consul-k8s-fips, cert-manager-istio-csr, rabbitmq-default-user-credential-updater-fips, actions-runner-controller, crossplane-provider-aws-glacier-fips, grafana-opentsdb-datasource-fips, kubevirt-cdi-operator, falcosidekick-ui,...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: git-lfs-fips, harbor, consul-k8s-fips, cert-manager-istio-csr, rabbitmq-default-user-credential-updater-fips, actions-runner-controller, crossplane-provider-aws-glacier-fips, grafana-opentsdb-datasource-fips, kubevirt-cdi-operator, falcosidekick-ui,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: git-lfs-fips, harbor, consul-k8s-fips, cert-manager-istio-csr, rabbitmq-default-user-credential-updater-fips, actions-runner-controller, crossplane-provider-aws-glacier-fips, grafana-opentsdb-datasource-fips, kubevirt-cdi-operator, falcosidekick-ui,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: git-lfs-fips, harbor, consul-k8s-fips, cert-manager-istio-csr, actions-runner-controller, crossplane-provider-aws-glacier-fips, grafana-opentsdb-datasource-fips, kubevirt-cdi-operator, falcosidekick-ui, kubevirt-cdi-operator-fips, databricks-cli-fips, gitaly,...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, manifest-tool, maru, cluster-api-helm-controller, kube-arangodb, rancher-helm, k8sgpt, opentofu, helm-set-status, kargo, gitness, helm-mapkubeapis, flux-helm-controller, helm-push, k9s, kyverno-notation-aws, xeol...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, manifest-tool, maru, cluster-api-helm-controller, kube-arangodb, rancher-helm, k8sgpt, opentofu, helm-set-status, kargo, gitness, helm-mapkubeapis, flux-helm-controller, helm-push, k9s, kyverno-notation-aws, xeol...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: kubevela, docker, trivy, scorecard, wolfictl, rancher, rancher-helm, newrelic-infrastructure-agent, docker-cli-buildx, helm-mapkubeapis, kubescape, helm-push, fuse-overlayfs-snapshotter, spegel, neuvector-scanner, kargo, trivy-operator, zarf, zot, k9s, falco-no-drive...

GHSA-2V4P-QF9Q-27WJ vulnerabilities

Vulnerabilities for packages: harbor, consul-k8s-fips, cert-manager-istio-csr, crossplane-provider-aws-glacier-fips, aws-network-policy-agent-fips, percona-xtradb-cluster-operator-fips, kubevirt-cdi-operator, kubevirt-cdi-operator-fips, databricks-cli-fips, gitaly,...

CVE-2026-84445 vulnerabilities

Vulnerabilities for packages: harbor, consul-k8s-fips, cert-manager-istio-csr, crossplane-provider-aws-glacier-fips, aws-network-policy-agent-fips, percona-xtradb-cluster-operator-fips, kubevirt-cdi-operator, kubevirt-cdi-operator-fips, databricks-cli-fips, gitaly,...

SUSE CVE-2026-7184

Mattermost versions 11.6.x = 11.6.1, 11.5.x = 11.5.4, 10.11.x = 10.11.15 fail to sanitize the Remote Cluster API response on PATCH operations, which allows authenticated users with the managesecureconnections permission to obtain remote cluster authentication tokens via a PATCH request to the...

GO-2026-6282 Mattermost doesn't sanitize the Remote Cluster API response on PATCH operations in github.com/mattermost/mattermost-server

Mattermost doesn't sanitize the Remote Cluster API response on PATCH operations in github.com/mattermost/mattermost-server...

PT-2026-82031

Mattermost doesn't sanitize the Remote Cluster API response on PATCH operations in github.com/mattermost/mattermost-server...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kubernetes, spqr, metrics-server, cilium, flux-notification-controller, caddy, argocd-image-updater, kuma, gatekeeper, kots, datadog-operator, cert-manager-istio-csr, rancher, fluent-operator, tekton-pipelines, emissary, gitlab-kas, cert-manager-webhook-pdns,...

CVE-2026-48162

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta3, DistributedAPI.sendtmpfile in framework/wazuh/core/cluster/dapi/dapi.py joins an attacker-controlled tmpfile value to WAZUHPATH without canonicalization or...

CVE-2026-48162

CVE-2026-48162 affects Wazuh (open-source threat detection platform) versions 4.0.0 through 4.14.6 and 5.0.0-beta3 . The vulnerability resides in DistributedAPI.send_tmp_file() in framework/wazuh/core/cluster/dapi/dapi.py, where an attacker-controlled tmp_file value is joined to WAZUH_PATH withou...