CVE-2026-42541 Kubewarden: RBAC Reconnaissance via unchecked can_i host capability call

Kubewarden is a policy engine for Kubernetes. Prior to , An attacker with privileged AdmissionPolicy or AdmissionPolicyGroup create permissions which isn't the default can craft a policy that makes use of the cani host callback. The callback issues a SubjectAccessReview SAR requests to enumerate...

Google Cloud AlloyDB for PostgreSQL 安全漏洞

Google Cloud AlloyDB for PostgreSQL is a cloud-native, high-performance relational database service from Google Inc. That service is compatible with PostgreSQL. Versions of Google Cloud AlloyDB for PostgreSQL prior to 2025-11-03 contained a security vulnerability. This vulnerability stemmed from...

Nginx UI 代码问题漏洞

Nginx UI is a web interface for Nginx developed by Jacky. Versions of Nginx UI 2.3.4 and earlier have code vulnerabilities. This vulnerability allows authenticated users to create cluster nodes that point to arbitrary internal URLs and send API requests with the X-Node-ID header, resulting in SSR...

CVE-2026-42600

Summary of the vulnerability (CVE-2026-42600) : MinIO’s ReadMultiple internode storage-REST endpoint is vulnerable to path traversal when processing a msgpack-encoded ReadMultipleReq body. An attacker holding the cluster root JWT can craft a request to POST /minio/storage/{drivePath}/v63/rmpl wit...

MinIO 路径遍历漏洞

MinIO is an open-source object storage server developed by the American company MinIO. This product supports the creation of infrastructures for machine learning, analysis, and application data workloads. Versions of MinIO from RELEASE.2022-07-24T01-54-52Z to RELEASE.2026-04-14T21-32-45Z had a pa...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017456)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017456 advisory. Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 8.0.26 and prior. Difficult to explo...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017453)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017453 advisory. Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior,...

GHSA-H74G-238J-357M vulnerabilities

Vulnerabilities for packages: cilium-cli, aws-flb-cloudwatch, cert-manager, hubble, redka, zarf, aws-flb-firehose, prometheus, prometheus-operator, containerd, datadog-agent, kubernetes, kube-fluentd-operator, runc, karpenter, karma, aactl, argo-cd, zot, helm, coredns, kyverno, istio, flux,...

CVE-2026-39825 vulnerabilities

Vulnerabilities for packages: cilium-cli, aws-flb-cloudwatch, cert-manager, hubble, redka, zarf, aws-flb-firehose, prometheus, prometheus-operator, containerd, datadog-agent, kubernetes, kube-fluentd-operator, runc, karpenter, karma, aactl, argo-cd, zot, helm, coredns, kyverno, istio, flux,...

GHSA-H74G-238J-357M vulnerabilities

Vulnerabilities for packages: rancher-agent, azure-aad-pod-identity-mic, cloud-provider-azure-fips, elastic-agent-fips, go-slim, net-kourier-fips, seaweedfs-rocksdb, trino, cluster-autoscaler, dask-gateway, datadog-agent, containerd, mattermost, vault-fips, coredns, istio-fips, argo-cd-fips,...

CVE-2026-39825 vulnerabilities

Vulnerabilities for packages: rancher-agent, azure-aad-pod-identity-mic, cloud-provider-azure-fips, elastic-agent-fips, go-slim, net-kourier-fips, seaweedfs-rocksdb, trino, cluster-autoscaler, dask-gateway, datadog-agent, containerd, mattermost, vault-fips, coredns, istio-fips, argo-cd-fips,...

GHSA-P9H5-JM8X-MJM5 vulnerabilities

Vulnerabilities for packages: rancher-agent, virt-api, net-kourier-fips, go-slim, crossplane-provider-aws-mediapackage, datadog-agent, sftpgo, crossplane-provider-aws-backup-fips, cluster-api-fips, opentelemetry-operator-fips, cert-manager-webhook-pdns-fips, external-dns-fips, istio,...

CVE-2026-42499 vulnerabilities

Vulnerabilities for packages: rancher-agent, virt-api, net-kourier-fips, go-slim, crossplane-provider-aws-mediapackage, datadog-agent, sftpgo, crossplane-provider-aws-backup-fips, cluster-api-fips, opentelemetry-operator-fips, cert-manager-webhook-pdns-fips, external-dns-fips, istio,...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: rancher-agent, virt-api, net-kourier-fips, go-slim, crossplane-provider-aws-mediapackage, datadog-agent, sftpgo, crossplane-provider-aws-backup-fips, cluster-api-fips, opentelemetry-operator-fips, cert-manager-webhook-pdns-fips, external-dns-fips, istio,...

GHSA-XQ5J-9R39-C3VF vulnerabilities

Vulnerabilities for packages: rancher-agent, virt-api, net-kourier-fips, go-slim, crossplane-provider-aws-mediapackage, datadog-agent, sftpgo, crossplane-provider-aws-backup-fips, cluster-api-fips, opentelemetry-operator-fips, cert-manager-webhook-pdns-fips, external-dns-fips, istio,...

GHSA-QC64-M6C2-V4X7 vulnerabilities

Vulnerabilities for packages: cilium-cli, lvm-driver, hubble, shfmt, opentelemetry-collector, secrets-store-csi-driver-provider-azure, consul-k8s, gitaly, dagger, apko, minify, mesosphere-vsphere-csi, argo-workflows, cert-manager-csi-driver, ini-file, metacontroller, redpanda, runc, zot,...

GHSA-8G2R-HHVJ-MV99 vulnerabilities

Vulnerabilities for packages: cilium-cli, lvm-driver, hubble, opentelemetry-collector, secrets-store-csi-driver-provider-azure, consul-k8s, gitaly, dagger, apko, minify, mesosphere-vsphere-csi, argo-workflows, cert-manager-csi-driver, metacontroller, redpanda, runc, zot, minio-operator, dex,...

GHSA-QF3Q-3H68-MMH2 vulnerabilities

Vulnerabilities for packages: cilium-cli, lvm-driver, hubble, shfmt, opentelemetry-collector, secrets-store-csi-driver-provider-azure, consul-k8s, gitaly, dagger, apko, minify, mesosphere-vsphere-csi, argo-workflows, cert-manager-csi-driver, ini-file, metacontroller, redpanda, runc, zot,...

GHSA-2283-WF8C-RW8R vulnerabilities

Vulnerabilities for packages: cilium-cli, lvm-driver, hubble, secrets-store-csi-driver-provider-azure, gitaly, dagger, apko, mesosphere-vsphere-csi, argo-workflows, cert-manager-csi-driver, runc, redpanda, zot, dex, dbmate, minio-object-browser, kyverno, istio, flux, litestream, cloud-sql-proxy,...

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: cilium-cli, lvm-driver, hubble, shfmt, opentelemetry-collector, secrets-store-csi-driver-provider-azure, consul-k8s, gitaly, dagger, apko, minify, mesosphere-vsphere-csi, argo-workflows, cert-manager-csi-driver, ini-file, metacontroller, redpanda, runc, zot,...