CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: k9s, docker-cli-buildx, gatekeeper, helm-operator, wolfictl, scorecard, syft, fuse-overlayfs-snapshotter, spegel, tigera-operator, k3s, steampipe, newrelic-infrastructure-agent, rancher, kaniko, kubescape-operator, zot, neuvector-scanner, rancher-agent, trivy,...

GHSA-PG57-6JWG-Q645 vulnerabilities

Vulnerabilities for packages: k9s, docker-cli-buildx, gatekeeper, helm-operator, wolfictl, scorecard, syft, fuse-overlayfs-snapshotter, spegel, tigera-operator, k3s, steampipe, newrelic-infrastructure-agent, rancher, kaniko, kubescape-operator, zot, neuvector-scanner, rancher-agent, trivy,...

CVE-2026-100697 Adminer 6.0.0 Server-Side Request Forgery via ClickHouse driver

Adminer 6.0.0 through 6.0.1, when the official ClickHouse driver plugin plugins/drivers/clickhouse.php, rewritten in 6.0.0 is loaded, is vulnerable to pre-authentication server-side request forgery. An unauthenticated attacker can submit authdriver=clickhouse with authserver set to an arbitrary U...

CVE-2026-100697 Adminer 6.0.0 Server-Side Request Forgery via ClickHouse driver

Adminer 6.0.0 through 6.0.1, when the official ClickHouse driver plugin plugins/drivers/clickhouse.php, rewritten in 6.0.0 is loaded, is vulnerable to pre-authentication server-side request forgery. An unauthenticated attacker can submit authdriver=clickhouse with authserver set to an arbitrary U...

CVE-2026-100697

Adminer 6.0.0 through 6.0.1, when the official ClickHouse driver plugin plugins/drivers/clickhouse.php, rewritten in 6.0.0 is loaded, is vulnerable to pre-authentication server-side request forgery. An unauthenticated attacker can submit authdriver=clickhouse with authserver set to an arbitrary U...

CVE-2026-100696

Adminer versions 4.16.0 through 6.0.1 are vulnerable to a pre-authentication Server-Side Request Forgery (SSRF) in the optional Elasticsearch driver (plugins/drivers/elastic.php). The issue stems from adminer/include/auth.inc.php invoking Driver::connect() before validating login results. An unau...

EUVD-2026-87669

Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery SSRF vulnerability in the optional Elasticsearch driver plugins/drivers/elastic.php, fixed in 6.0.2. Because adminer/include/auth.inc.php invokes Driver::connect before the login result is validated, an...

CVE-2026-100696 Adminer before 6.0.2 Unauthenticated SSRF via Elasticsearch Driver

Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery SSRF vulnerability in the optional Elasticsearch driver plugins/drivers/elastic.php, fixed in 6.0.2. Because adminer/include/auth.inc.php invokes Driver::connect before the login result is validated, an...

CVE-2026-100696 Adminer before 6.0.2 Unauthenticated SSRF via Elasticsearch Driver

Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery SSRF vulnerability in the optional Elasticsearch driver plugins/drivers/elastic.php, fixed in 6.0.2. Because adminer/include/auth.inc.php invokes Driver::connect before the login result is validated, an...

CLEANSTART-2026-BY91929 Security fix for GHSA-hrxh-6v49-42gf applied in: loki 3.7.1-r2, secrets-store-csi-driver-provider-aws 3.1.4-r1

GHSA-hrxh-6v49-42gf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

Fedora 44 : mongo-c-driver (2026-4286ff2dfd)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4286ff2dfd advisory. libbson 1.30.11 Fixes - Fix length check in bsonnewfrombuffer. ---- libmongoc 1.30.11 Fixes - Fix allocation in Windows Secure Channel. - Fix error...

Fedora 45 : mongo-c-driver (2026-0fcc2d09c6)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0fcc2d09c6 advisory. libmongoc 2.5.4 Fixes - Fix allocation in Windows Secure Channel. ---- libmongoc 2.5.3 Fixes - Use exact match for file ID in GridFS methods...

CVE-2026-100696: Server-Side Request Forgery (SSRF)

Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery SSRF vulnerability in the optional Elasticsearch driver plugins/drivers/elastic.php, fixed in 6.0.2. Because adminer/include/auth.inc.php invokes Driver::connect before the login result is validated, an...

CVE-2026-100697: Server-Side Request Forgery (SSRF)

Adminer 6.0.0 through 6.0.1, when the official ClickHouse driver plugin plugins/drivers/clickhouse.php, rewritten in 6.0.0 is loaded, is vulnerable to pre-authentication server-side request forgery. An unauthenticated attacker can submit authdriver=clickhouse with authserver set to an arbitrary U...

PT-2026-99368

Name of the Vulnerable Software and Affected Versions Adminer versions 6.0.0 through 6.0.1 Description Pre-authentication server-side request forgery occurs when the official ClickHouse driver plugin plugins/drivers/clickhouse.php is loaded. An unauthenticated attacker can provide...

SUSE CVE-2026-97481

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix possible ISR soft lockup There are rare cases in which the host gets stuck in the ISR because it is flooded with messages during the startup phase. The reason for the soft lockup in the ISR is the missing FIFO...

CVE-2025-1218

A flaw was found in PHP. The MySQL Native Driver mysqlnd wire protocol parser fails to verify that an incoming packet contains enough bytes before reading its fields. A malicious or compromised database server can send a truncated packet, causing the client application to read past the buffer...

CVE-2026-51773

A flaw was found in the VMware datastore driver of OpenStack glancestore. When an authenticated user supplies a crafted image location Uniform Resource Identifier URI pointing to an external host, the driver fails to validate the destination before forwarding requests. An attacker can exploit thi...

CVE-2026-100078

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: pass correct argument to function The first argument to iwlmeiwritecyclicbuf should be the cldev but the qhead pointer is passed instead. Fix it...

CVE-2026-79153

Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM on affected systems...