PT-2026-33840

In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei CSRs even when mstateen0.IMSIC is cleared, potentially enabling cross-context information leakage or disruption of interrupt handling...

EyouCMS 安全漏洞

EyouCMS is an open-source content management system CMS developed by Eyou Corporation in China, based on ThinkPHP. EyouCMS versions 1.7.1 and earlier have security vulnerabilities. These vulnerabilities stem from the handling of the filename parameter in the file...

Exploit for CVE-2026-4484

CVE-2026-4484 Masteriyo LMS = 2.1.6 - Missing Authorizatio...

GHSA-CFP9-33RC-J74F vulnerabilities

Vulnerabilities for packages: mongo-tools, secrets-store-csi-driver-provider-azure, spire-server, tetragon, mage, opentelemetry-operator, harbor, atlantis, pvc-autoresizer, grafana-operator, osv-scanner, git-credential-oauth, vault-k8s, knative-eventing, cloud-provider-aws, kubeflow-katib, nri-f5...

CVE-2026-27143 vulnerabilities

Vulnerabilities for packages: mongo-tools, secrets-store-csi-driver-provider-azure, spire-server, tetragon, mage, opentelemetry-operator, harbor, atlantis, pvc-autoresizer, grafana-operator, osv-scanner, git-credential-oauth, vault-k8s, knative-eventing, cloud-provider-aws, kubeflow-katib, nri-f5...

GHSA-CQRX-3M42-5P5W vulnerabilities

Vulnerabilities for packages: mongo-tools, secrets-store-csi-driver-provider-azure, spire-server, tetragon, mage, opentelemetry-operator, harbor, atlantis, pvc-autoresizer, grafana-operator, osv-scanner, git-credential-oauth, vault-k8s, knative-eventing, cloud-provider-aws, kubeflow-katib, nri-f5...

CVE-2026-27144 vulnerabilities

Vulnerabilities for packages: mongo-tools, secrets-store-csi-driver-provider-azure, spire-server, tetragon, mage, opentelemetry-operator, harbor, atlantis, pvc-autoresizer, grafana-operator, osv-scanner, git-credential-oauth, vault-k8s, knative-eventing, cloud-provider-aws, kubeflow-katib, nri-f5...

GHSA-CFP9-33RC-J74F vulnerabilities

Vulnerabilities for packages: redpanda, howdy-yall, scanner-test-golang-vulnerability-fixed, flux, gitlab-pages, argo-rollouts, azurefile-csi, nats-top, delve, knative-operator-fips, quic-go-fips, rancher-agent, external-secrets-operator, argo-cd, datadog-agent, knative-serving-fips,...

GHSA-CQRX-3M42-5P5W vulnerabilities

Vulnerabilities for packages: redpanda, howdy-yall, scanner-test-golang-vulnerability-fixed, flux, gitlab-pages, argo-rollouts, azurefile-csi, nats-top, delve, knative-operator-fips, quic-go-fips, rancher-agent, external-secrets-operator, argo-cd, datadog-agent, knative-serving-fips,...

CVE-2026-27143 vulnerabilities

Vulnerabilities for packages: redpanda, howdy-yall, scanner-test-golang-vulnerability-fixed, flux, gitlab-pages, argo-rollouts, azurefile-csi, nats-top, delve, knative-operator-fips, quic-go-fips, rancher-agent, external-secrets-operator, argo-cd, datadog-agent, knative-serving-fips,...

CVE-2026-27144 vulnerabilities

Vulnerabilities for packages: redpanda, howdy-yall, scanner-test-golang-vulnerability-fixed, flux, gitlab-pages, argo-rollouts, azurefile-csi, nats-top, delve, knative-operator-fips, quic-go-fips, rancher-agent, external-secrets-operator, argo-cd, datadog-agent, knative-serving-fips,...

EUVD-2026-23442

An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible...

CVE-2026-6284

An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible...

ch.exense.commons:exense-auth-ldap (>=1.3.0 <=1.3.1), ch.exense.commons:exense-core-server (>=1.3.0 <=1.3.1) +12 more potentially affected by CVE-2026-40458 +1 more via org.pac4j:pac4j-ldap (>=4.0.0 <=4.4.0)

org.pac4j:pac4j-ldap MAVEN version =4.0.0, =1.3.0, =1.3.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =1.0.0.RELEASE, =1.0.1.RELEASE Source cves: CVE-2026-40458, CVE-2026-40459 Source advisory: SNYK:JAVA-ORGPAC4J-16109662...

CVE-2026-6284

An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible...

USN-8185-1: Linux kernel (NVIDIA) vulnerabilities

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...

USN-8179-2 linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...

USN-8184-1: Linux kernel (Real-time) vulnerabilities

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: kyverno, buildkitd, spire-server, docker-cli-buildx, zot, skaffold, docker, vexctl, crossplane, zarf, gitsign, neuvector-sigstore-interface, teleport, flux-source-controller, ratify, tflint, trivy-operator, aactl, tekton-chains, policy-controller, ko, trivy, witness,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: kyverno, buildkitd, spire-server, docker-cli-buildx, zot, skaffold, docker, vexctl, crossplane, zarf, gitsign, neuvector-sigstore-interface, teleport, flux-source-controller, ratify, tflint, trivy-operator, aactl, tekton-chains, policy-controller, ko, trivy, witness,...