EUVD-2026-22180

MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a sandbox escape vulnerability in the ToolExecutor component. By leveraging Python's ctypes library to execute raw system calls, an authenticated attacker with workspace privileges can bypass the LDPRELOAD-based...

PT-2026-32872

Name of the Vulnerable Software and Affected Versions Windows Container Isolation FS Filter Driver affected versions not specified Description A use after free issue in the Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally. Use after free is ...

Microsoft Windows Container Isolation FS Filter Driver Resource Management Error Vulnerability

The Microsoft Windows Container Isolation FS Filter Driver is an application developed by Microsoft Corporation. It is a driver for container isolation. There is a resource management vulnerability present in the Microsoft Windows Container Isolation FS Filter Driver. Attackers can exploit this...

PT-2026-32575

MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a sandbox escape vulnerability in the ToolExecutor component. By leveraging Python's ctypes library to execute raw system calls, an authenticated attacker with workspace privileges can bypass the LD PRELOAD-base...

CVE-2026-33098: Use After Free

Use after free in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally...

USN-8163-2: Linux kernel (Azure) vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

USN-8163-2 linux-azure vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

CVE-2026-39977

A flaw was found in flatpak-builder. A specially crafted manifest or source can bypass path restrictions by using symbolic links within the license-files field, allowing the builder to follow paths outside the intended source directory, reading arbitrary files from the host system and including...

Malicious Package

Overview upstart-offer-container is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

CVE-2026-40226

A flaw was found in nspawn, a container runtime environment within systemd. A local attacker or a process within an nspawn container could exploit this vulnerability by using a specially crafted optional configuration file. This could allow the attacker to escape the container's isolation and...

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service (CVE-2026-34043)

Summary Node.js module serialize-javascript is used by IBM App Connect Enterprise Certified Container. IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service. This bulletin provides patch information to address the reported vulnerability in...

Ubuntu Pro Realtime 22.04 LTS : Linux kernel (Intel IoTG Real-time) vulnerabilities (USN-8164-1)

The remote Ubuntu Pro Realtime 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8164-1 advisory. Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker coul...

Ubuntu 22.04 LTS : Linux kernel (Azure FIPS) vulnerabilities (USN-8163-1)

"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8163-1 advisory. Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these...

MAL-2026-2613 Malicious code in upstart-offer-container (npm)

Package collects sensitive data SSH keys, AWS creds, env vars, exfiltrates it to a remote server, and executes shell commands. MALWARE! --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148e48dd7b06a250063027a17895962000ca784a3fe52b704bea049afc85763a The package...

Malicious code in upstart-offer-container (npm)

Package collects sensitive data SSH keys, AWS creds, env vars, exfiltrates it to a remote server, and executes shell commands. MALWARE! --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148e48dd7b06a250063027a17895962000ca784a3fe52b704bea049afc85763a The package...

Exploit for CVE-2026-31413

CVE-2026-31413: One Byte in the BPF Verifier to Container Esca...

Exploit for Out-of-bounds Read in Linux Linux_Kernel

CVE-2026-31413: One Byte in the BPF Verifier to Container Esca...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, cilium, snyk-cli, fuse-overlayfs-snapshotter, kubescape, kots, external-secrets-operator, cloud-provider-aws, prometheus-operator, libnvidia-container, gitaly, cilium-cli, ingress-nginx-controller, newrelic-fluent-bit-output, redka, zot, runc,...

GHSA-XJ38-JXC5-RPPX vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, argo-workflows-fips, buildkite-agent, gitlab-workhorse-ce-fips, azurefile-csi-fips, backup-restore-operator, libnvidia-container-fips, zitadel, aws-flb-firehose, k9s-fips, gitlab-rails-ce-fips, flux-fips, docker-cli-fips, kots, nemo,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, argo-workflows-fips, buildkite-agent, gitlab-workhorse-ce-fips, azurefile-csi-fips, backup-restore-operator, libnvidia-container-fips, zitadel, aws-flb-firehose, k9s-fips, gitlab-rails-ce-fips, flux-fips, docker-cli-fips, kots, nemo,...