CVE-2026-13196

Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the...

GO-2023-2095 vulnerabilities

Vulnerabilities for packages: smarter-device-manager-fips, kind, metrics-server, configmap-reload-fips, kubeflow-katib...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: neuvector-fips, node-feature-discovery, runc, eks-distro, opentelemetry-collector-contrib, cluster-autoscaler, eks-distro-fips, opentelemetry-collector-contrib-fips, cadvisor, grafana-alloy, cluster-autoscaler-fips, grype, syft, kubernetes, neuvector-scanner, ctop,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: smarter-device-manager, melange, spire-server, step-ca, pulumi-language-dotnet, gomplate, ksops, grafana-agent-operator, vcluster, kubernetes-csi-external-provisioner, grafana-mimir, k8sgpt, ferretdb, kubernetes-csi-driver-hostpath, minio, kaniko, guac, terraform-doc...

GO-2025-4097 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, kubernetes, grafana-alloy, nvidia-container-toolkit, k3s, buildah, falco-no-driver, sriov-network-device-plugin, podman...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, nvidia-container-toolkit, buildah, cadvisor, podman, sriov-network-device-plugin, k8s-device-plugin...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: docker, opentelemetry-collector-contrib, neuvector-scanner, kubernetes, grafana-alloy, ctop, k3s, buildah, cadvisor, podman, syft, grype, k8s-device-plugin, runc...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, kubeflow-pipelines, nodetaint, cri-tools, ip-masq-agent, argocd-image-updater, aws-efs-csi-driver, k8s-device-plugin, local-static-provisioner, spark-operator, kubernetes-csi-driver-hostpath...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, kubeflow-pipelines, nodetaint, ip-masq-agent, argocd-image-updater, aws-efs-csi-driver, k8s-device-plugin, local-static-provisioner...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, fuse-overlayfs-snapshotter, wuzz, k3s, runc, k8s-device-plugin, gitness...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, fuse-overlayfs-snapshotter, wuzz, k3s, runc, k8s-device-plugin, gitness...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, dask-gateway, gitlab-kas, istio, spire-server, kubernetes-csi-node-driver-registrar, newrelic-fluent-bit-output, aws-flb-kinesis, aws-flb-firehose, flux, k8s-device-plugin, libnvidia-container, fscrypt, telegraf, kube-fluentd-operator,...

PT-2026-72031

Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the...

PT-2026-72033

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the event notification functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to corrupt kernel heap and...

CVE-2026-18164

creationtimestamp| type| source ---|---|--- 2026-08-13 20:15:03+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-225-01...

EUVD-2026-58240

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker v2.0.22 that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights...

CVE-2026-73669 Signify Philips Hue Bridge Pro MQTT broker missing authentication

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker service that listens on all network interfaces without authentication. An unauthenticated attacker with network access to the MQTT service on a vulnerable system can read data and control connected lights. Fixed in...

SUSE CVE-2026-68180

In the Linux kernel, the following vulnerability has been resolved: intelth: fix MSC output device reference leak intelthoutputopen looks up the output device with busfinddevicebydevt, which returns the device with a reference that must be dropped after use. commit 95fc36a234da "intelth: fix devi...

CVE-2026-16101

Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below...

Philips Hue Bridge Pro

RISK EVALUATION The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker v2.0.22 that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights...