PT-2026-45027

Impact IPAM is the IP address Manager for Cluster API Provider Metal3. The IPAM controller's ClusterRole granted full CRUD permissions create, delete, get, list, patch, update, watch on core/v1 Secrets. The controller never accesses Secrets during normal operation. If the controller pod were...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: docker, osv-scanner, kubescape-operator, xeol, fuse-overlayfs-snapshotter, docker-cli-buildx, helm-set-status, kubevela, helm-mapkubeapis, trivy, rancher, skaffold, eksctl, kots, manifest-tool, steampipe, syft, k3s, wolfictl, helm, kaniko, gatekeeper, opa-envoy,...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: docker, osv-scanner, kubescape-operator, xeol, fuse-overlayfs-snapshotter, docker-cli-buildx, helm-set-status, kubevela, helm-mapkubeapis, trivy, rancher, skaffold, eksctl, kots, manifest-tool, steampipe, syft, k3s, wolfictl, helm, kaniko, gatekeeper, opa-envoy,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: linkerd2-fips, zarf-fips, kubevela-fips, dagger, kube-mgmt-fips, osv-scanner, gitlab-rails-ce-fips, redpanda-operator, neuvector-scanner, skaffold-fips, datadog-agent, datadog-agent-fips, spegel, xeol-fips, docker-cli-buildx, kubescape-operator-fips,...

CVE-2026-42499 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3control-fips, crossplane-provider-aws-iam-fips, image-factory-fips, cosign-fips, crossplane-provider-aws-ecs, neuvector-sigstore-interface-fips, crossplane-provider-aws-elbv2-fips, gitlab-rails-ce-fips, crossplane-provider-aws-autoscaling,...

GHSA-XQ5J-9R39-C3VF vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3control-fips, crossplane-provider-aws-iam-fips, image-factory-fips, cosign-fips, crossplane-provider-aws-ecs, neuvector-sigstore-interface-fips, crossplane-provider-aws-elbv2-fips, gitlab-rails-ce-fips, crossplane-provider-aws-autoscaling,...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3control-fips, crossplane-provider-aws-iam-fips, image-factory-fips, cosign-fips, crossplane-provider-aws-ecs, neuvector-sigstore-interface-fips, crossplane-provider-aws-elbv2-fips, gitlab-rails-ce-fips, crossplane-provider-aws-autoscaling,...

GHSA-P9H5-JM8X-MJM5 vulnerabilities

Vulnerabilities for packages: act, azure-service-operator, coredns, cert-manager, kaf, mattermost, cluster-autoscaler, grafana, buildah, kuma, aws-flb-cloudwatch, cilium-certgen, helm, tekton-chains, kpt, metrics-server, tkn, containerd, cortex, rancher-webhook, cilium, teleport,...

GHSA-QC64-M6C2-V4X7 vulnerabilities

Vulnerabilities for packages: docker, minio-operator, xeol, mountpoint-s3-csi-driver, step, migrate, act, azure-service-operator, coredns, cert-manager, container-object-storage-interface, gosu, cluster-autoscaler, kaf, grafana, mattermost, nri-nginx, buildah, kuma, aws-flb-cloudwatch, kbld,...

GHSA-2283-WF8C-RW8R vulnerabilities

Vulnerabilities for packages: xeol, step, migrate, coredns, azure-service-operator, kaf, cert-manager, mattermost, cluster-autoscaler, grafana, buildah, kuma, aws-flb-cloudwatch, helm, tekton-chains, vault-secrets-webhook, secrets-store-csi-driver-provider-azure, kpt, metrics-server, tkn, mc,...

CVE-2026-39823 vulnerabilities

Vulnerabilities for packages: xeol, step, migrate, coredns, azure-service-operator, kaf, cert-manager, mattermost, cluster-autoscaler, grafana, buildah, kuma, aws-flb-cloudwatch, helm, tekton-chains, vault-secrets-webhook, secrets-store-csi-driver-provider-azure, kpt, metrics-server, tkn, mc,...

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: docker, minio-operator, xeol, mountpoint-s3-csi-driver, step, migrate, act, azure-service-operator, coredns, cert-manager, container-object-storage-interface, gosu, cluster-autoscaler, kaf, grafana, mattermost, nri-nginx, buildah, kuma, aws-flb-cloudwatch, kbld,...

CVE-2026-39817 vulnerabilities

Vulnerabilities for packages: docker, minio-operator, xeol, mountpoint-s3-csi-driver, step, migrate, act, azure-service-operator, coredns, cert-manager, container-object-storage-interface, gosu, cluster-autoscaler, kaf, grafana, mattermost, nri-nginx, buildah, kuma, aws-flb-cloudwatch, kbld,...

GHSA-XQ5J-9R39-C3VF vulnerabilities

Vulnerabilities for packages: act, azure-service-operator, coredns, cert-manager, kaf, mattermost, cluster-autoscaler, grafana, buildah, kuma, aws-flb-cloudwatch, cilium-certgen, helm, tekton-chains, kpt, metrics-server, tkn, containerd, cortex, rancher-webhook, cilium, teleport,...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: act, azure-service-operator, coredns, cert-manager, kaf, mattermost, cluster-autoscaler, grafana, buildah, kuma, aws-flb-cloudwatch, cilium-certgen, helm, tekton-chains, kpt, metrics-server, tkn, containerd, cortex, rancher-webhook, cilium, teleport,...

GHSA-QF3Q-3H68-MMH2 vulnerabilities

Vulnerabilities for packages: docker, minio-operator, xeol, mountpoint-s3-csi-driver, step, migrate, act, azure-service-operator, coredns, cert-manager, container-object-storage-interface, gosu, cluster-autoscaler, kaf, grafana, mattermost, nri-nginx, buildah, kuma, aws-flb-cloudwatch, kbld,...

CVE-2026-42499 vulnerabilities

Vulnerabilities for packages: act, azure-service-operator, coredns, cert-manager, kaf, mattermost, cluster-autoscaler, grafana, buildah, kuma, aws-flb-cloudwatch, cilium-certgen, helm, tekton-chains, kpt, metrics-server, tkn, containerd, cortex, rancher-webhook, cilium, teleport,...

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: minio-operator, xeol, mountpoint-s3-csi-driver, step, migrate, act, azure-service-operator, coredns, cert-manager, container-object-storage-interface, kaf, cluster-autoscaler, mattermost, grafana, nri-nginx, buildah, kuma, aws-flb-cloudwatch, kbld, cilium-certgen,...

CVE-2026-40050

CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability CVE-2026-40050 in LogScale. This vulnerability only requires mitigation by customers that host specific versions of LogScale and does not affect Next-Gen SIEM customers. The vulnerability...

CrowdStrike LogScale 安全漏洞

CrowdStrike LogScale is a high-performance log management and analysis platform developed by the CrowdStrike company in the United States. There is a security vulnerability in CrowdStrike LogScale, which stems from an unvalidated path traversal issue in certain cluster API endpoints. This...