CVE-2026-76444

CVE-2026-76444 affects an internal service in Cisco Identity Services Engine (ISE) and Cisco ISE-PIC . The root cause is missing authentication on the Policy Runtime Repository Table (PRRT) service , allowing an unauthenticated, remote attacker to send a crafted request and retrieve sensitive con...

CVE-2026-76444 Cisco Identity Services Engine Information Disclosure Vulnerability

A vulnerability in an internal service of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to retrieve sensitive configuration information from an affected device. This vulnerability is due to missing authentication on the Policy Runtime Repository Table PRRT service. A...

CVE-2026-20235

Cisco Identity Services Engine (ISE) contains an information disclosure vulnerability in its API , caused by insufficient validation of user-supplied parameters in API requests. An authenticated remote attacker with valid administrative credentials can send a crafted API request to view sensitive...

EUVD-2026-81149

A vulnerability in the API of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to view sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient...

EUVD-2026-81144

A vulnerability in the client provisioning download feature of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to access protected files on an affected device. This vulnerability is due to insufficient validation of directory traversal character sequences in a...

CVE-2026-76433

This is a directory traversal vulnerability in the client provisioning download feature of Cisco ISE and Cisco ISE-PIC . Due to insufficient validation of directory traversal character sequences in a user-supplied path during provisioning resource requests, an unauthenticated, remote attacker can...

CVE-2026-76433 Cisco Identity Services Engine Information Disclosure Vulnerability

A vulnerability in the client provisioning download feature of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to access protected files on an affected device. This vulnerability is due to insufficient validation of directory traversal character sequences in a...

CVE-2026-87076

Tanium addressed an information disclosure vulnerability in Discover...

AZL-103116 CVE-2026-81870 affecting package azurelinux-image-tools 1.6.0-2

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103128 CVE-2026-81870 affecting package cloud-provider-kubevirt 0.5.1-7

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103176 CVE-2026-81870 affecting package kata-containers-cc 3.15.0.aks0-20

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103158 CVE-2026-81870 affecting package docker-compose 2.27.0-13

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103218 CVE-2026-81870 affecting package kubernetes 1.30.10-29

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103152 CVE-2026-81870 affecting package docker-buildx 0.14.0-16

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103082 CVE-2026-81870 affecting package kata-containers-preview 3.27.0~preview2-2

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103236 CVE-2026-81870 affecting package moby-containerd-cc 1.7.7-16

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103125 CVE-2026-81870 affecting package cert-manager 1.12.15-12

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103077 CVE-2026-81870 affecting package cri-o 1.30.1-1

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103200 CVE-2026-81870 affecting package keda 2.14.1-18

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

AZL-103164 CVE-2026-81870 affecting package etcd 3.5.33-1

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...