CVE-2026-23655

Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network...

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

Microsoft ACI Confidential Containers Information Disclosure Vulnerability

Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, ferretdb, argo-cd, kwok, nfs-subdir-external-provisioner, azure-service-operator, q, rekor, coredns, sftpgo-plugin-geoipfilter, crossplane-provider-keycloak, mariadb-operator, secrets-store-csi-driver-provider-azure,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, ferretdb, argo-cd, kwok, nfs-subdir-external-provisioner, azure-service-operator, q, rekor, coredns, sftpgo-plugin-geoipfilter, crossplane-provider-keycloak, helm-docs, mariadb-operator, secrets-store-csi-driver-provider-azure,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: chronyexporter, kubevela, podinfo, kubernetes-dashboard, pluto, crossplane-provider-sql, redis-operator-fips, s5cmd, kepler, chart-testing, lvm-driver, chezmoi, step-ca, tetragon-fips, oras, crossplane-provider-azure-storage, aws-otel-collector, velero, cargobump,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: chronyexporter, kubevela, podinfo, kubernetes-dashboard, pluto, crossplane-provider-sql, redis-operator-fips, s5cmd, kepler, chart-testing, lvm-driver, chezmoi, step-ca, tetragon-fips, oras, crossplane-provider-azure-storage, aws-otel-collector, velero, cargobump,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: chronyexporter, kubevela, podinfo, kubernetes-dashboard, pluto, crossplane-provider-sql, redis-operator-fips, s5cmd, kepler, chart-testing, lvm-driver, chezmoi, step-ca, tetragon-fips, oras, crossplane-provider-azure-storage, aws-otel-collector, glab, mariadb-operato...

Microsoft Azure Compute Gallery 安全漏洞

Microsoft Azure Compute Gallery is a service provided by Microsoft in the United States that manages virtual machines. There are security vulnerabilities in Microsoft Azure Compute Gallery. Attackers can exploit these vulnerabilities to obtain sensitive information...

PT-2026-7414

Name of the Vulnerable Software and Affected Versions Azure Compute Gallery affected versions not specified Description An authorized attacker may be able to disclose sensitive information over a network due to the cleartext storage of that information within Azure Compute Gallery. Approximately...

HPESBHF05010 rev.1 - Certain HPE ProLiant DL/ML/XD, Synergy, Edgeline and Alletra Servers Using Certain Intel Processors, INTEL-SA-01314, 2025.4 IPU, Intel TDX Module Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute DL320 Gen12 - Prior to v1.5009-05-2025 HPE ProLiant Compute DL340 Gen12 - Prior to v1.5009-05-2025 HPE ProLiant Compute DL360 Gen12 - Prior to...

PT-2026-7405

Improper neutralization of special elements used in a command 'command injection' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

Microsoft Azure Compute Gallery 命令注入漏洞

Microsoft Azure Compute Gallery is a service provided by Microsoft in the United States that manages virtual machines. There is a command injection vulnerability present in Microsoft Azure Compute Gallery. Attackers can exploit this vulnerability to gain higher privileges...

Op Bizarre Bazaar: New LLMjacking Campaign Targets Unprotected Models

Pillar Security Research has discovered Operation Bizarre Bazaar, a massive cyberattack campaign led by a hacker known as Hecker. Between December 2025 and January 2026, over 35,000 sessions were recorded targeting AI systems to steal compute power and resell access via silver.inc...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: A divide error occurred in ndlabeldatainit. If a faulty CXL memory device returns a incorrect zero LSA size in its memory device information Identified Memory Device Opcode 4000h, CXL Specification 3.1,...

CVE-2026-20080

A vulnerability in the SSH service of Cisco IEC6400 Wireless Backhaul Edge Compute Software could allow an unauthenticated, remote attacker to cause the SSH service to stop responding. This vulnerability exists because the SSH service lacks effective flood protection. An attacker could exploit th...

CVE-2026-20080 Cisco IEC6400 Edge Compute Appliance SSH Denial of Service Vulnerability

A vulnerability in the SSH service of Cisco IEC6400 Wireless Backhaul Edge Compute Software could allow an unauthenticated, remote attacker to cause the SSH service to stop responding. This vulnerability exists because the SSH service lacks effective flood protection. An attacker could exploit th...

CVE-2026-20080

A vulnerability in the SSH service of Cisco IEC6400 Wireless Backhaul Edge Compute Software could allow an unauthenticated, remote attacker to cause the SSH service to stop responding. This vulnerability exists because the SSH service lacks effective flood protection. An attacker could exploit th...

CVE-2026-20080

CVE-2026-20080 affects Cisco IEC6400 Wireless Backhaul Edge Compute Software. The SSH service can be flooded by unauthenticated remote attackers, causing the SSH server to become unresponsive while other operations stay stable. Reported by Cisco and mirrored in multiple feeds, the issue arises fr...

EUVD-2026-3662

A vulnerability in the SSH service of Cisco IEC6400 Wireless Backhaul Edge Compute Software could allow an unauthenticated, remote attacker to cause the SSH service to stop responding. This vulnerability exists because the SSH service lacks effective flood protection. An attacker could exploit th...