8788 matches found
PT-2026-23029
A vulnerability in Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to send traffic that should be denied through an affected device. This vulnerability is due to improper error...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005513)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005513 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: cancel dqisyncwork before freeing oinfo ocfs2globalreadinfo will initialize and schedule...
Missing Encryption of Sensitive Data
Overview github.com/rancher/rancher/pkg/controllers/management/node is a complete container management platform Affected versions of this package are vulnerable to Missing Encryption of Sensitive Data in the cluster creation using RKE templates with Weave CNI, where the WEAVEPASSWORD is not set,...
GHSA-6X34-89P7-95WG Rancher has downstream cluster privilege escalation through cluster and project role template binding (CRTB/PRTB)
Impact An issue was discovered in Rancher versions up to and including 2.5.15 and 2.6.6 where a flaw with authorization logic allows privilege escalation through cluster role template binding CRTB and project role template binding PRTB. This issue does not affect the local cluster, it affects onl...
Rancher has downstream cluster privilege escalation through cluster and project role template binding (CRTB/PRTB)
Impact An issue was discovered in Rancher versions up to and including 2.5.15 and 2.6.6 where a flaw with authorization logic allows privilege escalation through cluster role template binding CRTB and project role template binding PRTB. This issue does not affect the local cluster, it affects onl...
Rancher doesn't properly sanitize credentials in cluster template answers
Impact It was discovered that in Rancher versions up to and including 2.5.12 and 2.6.3 there is a failure to properly sanitize credentials in cluster template answers. This failure can lead to plaintext storage and exposure of credentials, passwords and API tokens. The exposed credentials are...
GHSA-8W87-58W6-HFV8 Rancher doesn't properly sanitize credentials in cluster template answers
Impact It was discovered that in Rancher versions up to and including 2.5.12 and 2.6.3 there is a failure to properly sanitize credentials in cluster template answers. This failure can lead to plaintext storage and exposure of credentials, passwords and API tokens. The exposed credentials are...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005518)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005518 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: reserve space for inline xattr before attaching reflink tree One of our customers reported...
Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that report metrics are vulnerable to loss of confidentiality (CVE-2025-13490)
Summary When an IBM App Connect Enterprise Certified Container IntegrationRuntime or IntegrationServer is configured to report metrics to a Prometheus instance in the OpenShift cluster, the metrics are sent over an unencrypted channel. This bulletin provides patch information to address the...
GHSA-9H8M-3FM2-QJRQ vulnerabilities
Vulnerabilities for packages: prometheus-mongodb-exporter-fips, packer, weaviate, containerd, kubevela-fips, kaniko, cloudprober, bank-vaults-fips, kubernetes-csi-external-provisioner, kubescape-operator, percona-server-mongodb-operator, google-osconfig-agent, gitlab-workhorse-ce-fips, kaniko-fip...
CVE-2026-22728
Bitnami Sealed Secrets is vulnerable to a scope-widening attack during the secret rotation /v1/rotate flow. The rotation handler derives the sealing scope for the newly encrypted output from untrusted spec.template.metadata.annotations present in the input SealedSecret. By submitting a victim...
EUVD-2026-8795
Sealed Secrets for Kubernetes: Rotate API Allows Scope Widening from Strict/Namespace-Wide to Cluster-Wide via Untrusted Template Annotations...
GHSA-465P-V42X-3FMJ Sealed Secrets for Kubernetes: Rotate API Allows Scope Widening from Strict/Namespace-Wide to Cluster-Wide via Untrusted Template Annotations
This report shows a scope-widening issue in the rotate re-encrypt flow: the output scope can be derived from untrusted spec.template.metadata.annotations on the input sealed secret. If a victim sealed secret is strict- or namespace-scoped, an attacker who can submit it to the rotate endpoint can...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: external-secrets-operator, flux-image-automation-controller, guac, vcluster, cilium-cli, flux-source-controller, nfpm, pulumi-language-dotnet, rclone, crossplane-provider-aws-ec2, boring-registry, buildkitd, flux-notification-controller, wolfictl, trivy-operator,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: external-secrets-operator, flux-image-automation-controller, guac, vcluster, cilium-cli, flux-source-controller, nfpm, pulumi-language-dotnet, rclone, crossplane-provider-aws-ec2, boring-registry, buildkitd, flux-notification-controller, wolfictl, trivy-operator,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: terraform-provider-databricks-fips, packer, crossplane-provider-azure-sql, buildkitd-fips, terragrunt, crossplane-provider-aws-kinesis-fips, omni-fips, argo-events, amazon-ssm-agent-fips, kots, crossplane-provider-aws-sns-fips, flux-helm-controller, vcluster,...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: terraform-provider-databricks-fips, packer, crossplane-provider-azure-sql, buildkitd-fips, terragrunt, crossplane-provider-aws-kinesis-fips, omni-fips, argo-events, amazon-ssm-agent-fips, kots, crossplane-provider-aws-sns-fips, flux-helm-controller, vcluster,...
Important: Red Hat Security Advisory: valkey security update
An update for valkey is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
BIT-SEALED-SECRETS-2026-22728 Bitnami Sealed Secrets /v1/rotate can widen sealing scope to cluster-wide via attacker-controlled template annotations
Bitnami Sealed Secrets is vulnerable to a scope-widening attack during the secret rotation /v1/rotate flow. The rotation handler derives the sealing scope for the newly encrypted output from untrusted spec.template.metadata.annotations present in the input SealedSecret. By submitting a victim...
