CVE-2026-71846

A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secrets get, list, and watch permissions, while the code only requires access to a single specific Secret. This excessive privilege means that a compromise of the insights-client po...

CVE-2026-18608

A flaw was found in the Data Science Pipelines Operator DSPO. The operator's ClusterRole, which defines its permissions, includes extensive privileges beyond what is necessary for its operation. These excessive permissions, such as the ability to execute commands within pods and manage cluster-wi...

CVE-2026-18608 Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-wide

A flaw was found in the Data Science Pipelines Operator DSPO. The operator's ClusterRole, which defines its permissions, includes extensive privileges beyond what is necessary for its operation. These excessive permissions, such as the ability to execute commands within pods and manage cluster-wi...

PT-2026-69955

Name of the Vulnerable Software and Affected Versions Data Science Pipelines Operator affected versions not specified Description Data Science Pipelines Operator DSPO contains a flaw where its ClusterRole grants excessive privileges beyond what is required for its operation. These permissions...

CVE-2026-40550 Privilege Escalation in mpGabinet

mpGabinet is vulnerable to Privilege Escalation due to excessive database privileges assigned to the user used by the application. An attacker with access to any running application instance connected to the backend server can extract database credentials from the application’s memory by inspecti...

Top 10 actions to build agents securely with Microsoft Copilot Studio

Organizations are rapidly adopting Copilot Studio agents, but threat actors are equally fast at exploiting misconfigured AI workflows. Mis-sharing, unsafe orchestration, and weak authentication create new identity and data‑access paths that traditional controls don’t monitor. As AI agents become...

CVE-2025-68267

In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installation token...

PT-2025-51718

In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installation token...

EUVD-2018-13776

Malware in sbrugna...

EUVD-2021-2145

Malware in sbrugna...

EUVD-2015-2833

Malware in sbrugna...

EUVD-2025-27470

Malicious code in bioql PyPI...

EUVD-2024-46054

Malicious code in bioql PyPI...

EUVD-2023-1083

Malicious code in bioql PyPI...

EUVD-2025-27475

Malicious code in bioql PyPI...

CVE-2025-53914

Excessive Privileges vulnerability in Calix GigaCenter ONT Broadcom SoC modules allows Privilege Abuse.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE, 812G, 813G, 818G...

CVE-2025-53913

Excessive Privileges vulnerability in Calix GigaCenter ONT Quantenna SoC modules allows Privilege Abuse.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE, 812G, 813G, 818G...

CVE-2025-53914 Calix GigaCenter ONT (Broadcom SoC) - Excessive Privileges

Excessive Privileges vulnerability in Calix GigaCenter ONT Broadcom SoC modules allows Privilege Abuse.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE, 812G, 813G, 818G...

CVE-2025-53914 Calix GigaCenter ONT (Broadcom SoC) - Excessive Privileges

Excessive Privileges vulnerability in Calix GigaCenter ONT Broadcom SoC modules allows Privilege Abuse.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE, 812G, 813G, 818G...

CVE-2025-53914

CVE-2025-53914 affects Calix GigaCenter ONT devices with Broadcom SoCs (models 844E, 844G, 844GE, 854GE, 812G, 813G, 818G). The issue is an excessive privileges vulnerability allowing privilege abuse due to a privilege escalation/root cause described as privilege abuse. CVSS-based notes in source...