RHSA-2026:2465 Red Hat Security Advisory: pcs security update

Bulletin has no description...

CVE-2026-26009 Catalyst Affected by Remote Code Execution as Root via Containerized Install Script Execution

Catalyst is a platform built for enterprise game server hosts, game communities, and billing panel integrations. Install scripts defined in server templates execute directly on the host operating system as root via bash -c, with no sandboxing or containerization. Any user with template.create or...

CVE-2026-21251

Use after free in Windows Cluster Client Failover allows an authorized attacker to elevate privileges locally...

CVE-2026-21251

Use after free in Windows Cluster Client Failover allows an authorized attacker to elevate privileges locally...

CVE-2026-21251 Cluster Client Failover (CCF) Elevation of Privilege Vulnerability

...

CVE-2026-21251

CVE-2026-21251 describes a use-after-free in the Windows Cluster Client Failover, enabling a locally authenticated attacker to achieve privilege elevation. The CVSS 3.1 base score is 7.8 (HIGH) with local attack vector, low complexity, and low privileges required; confidentiality, integrity, and ...

CVE-2026-21251 Cluster Client Failover (CCF) Elevation of Privilege Vulnerability

...

CVE-2026-21251

Use after free in Windows Cluster Client Failover allows an authorized attacker to elevate privileges locally...

Cluster Client Failover (CCF) Elevation of Privilege Vulnerability

Use after free in Windows Cluster Client Failover allows an authorized attacker to elevate privileges locally...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: amazon-vpc-cni-plugins-fips, telegraf, kubernetes-csi-external-snapshotter-fips, skopeo, wavefront-collector-for-kubernetes, crossplane-provider-aws-kms-fips, crossplane-provider-aws-cloudfront, elvish, addon-resizer, actions-runner-controller-fips, cephcsi,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: amazon-vpc-cni-plugins-fips, telegraf, kubernetes-csi-external-snapshotter-fips, skopeo, wavefront-collector-for-kubernetes, crossplane-provider-aws-kms-fips, crossplane-provider-aws-cloudfront, elvish, addon-resizer, actions-runner-controller-fips, cephcsi,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: amazon-vpc-cni-plugins-fips, kubernetes-csi-external-snapshotter-fips, skopeo, wavefront-collector-for-kubernetes, crossplane-provider-aws-kms-fips, crossplane-provider-aws-cloudfront, pgtimetable-fips, addon-resizer, actions-runner-controller-fips, cephcsi,...

PT-2026-7355

Use after free in Windows Cluster Client Failover allows an authorized attacker to elevate privileges locally...

Moderate: Red Hat Security Advisory: VolSync v0.13 security fixes and container updates

VolSync v0.13 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

Important: Red Hat Security Advisory: RHACS 4.9.3 security and bug fix update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

[SECURITY] Fedora 43 Update: k9s-0.50.18-1.fc43

Kubernetes CLI To Manage Your Clusters In Style!...

SUSE CVE-2026-1580

A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/auth-method Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to t...

RLSA-2026:1906 Important: fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fixes: pyasn1: pyasn1: Denial of Service due to memory exhaustion from malform...