CLEANSTART-2026-NE14632 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the prometheus-operator package. gRPC-Go is the Go language implementation of gRPC...

CLEANSTART-2026-DS09618 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the prometheus-operator package. gRPC-Go is the Go language implementation of gRPC...

openSUSE 16 Security Update : distribution (openSUSE-SU-2026:21898-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21898-1 advisory. - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the...

CVE-2026-5724

Resumen El servicio frontend de Temporal no aplica autenticación en las RPC gRPC de streaming. La cadena de interceptores de streaming omite el interceptor de autorización, lo que permite que llamadores no autenticados accedan a AdminService/StreamWorkflowReplicationMessages, un endpoint...

CVE-2026-56121_exploit

CVE-2026-56121 — Feast Registry Unauthenticated RCE dill.loads Unauthenticated remote code execution in the Feast feature store's registry gRPC server. The ApplyFeatureView RPC rebuilds an OnDemandFeatureView from the request proto. Doing so base64-decodes spec.userdefinedfunction.body and passes...

CLEANSTART-2026-AT83636 gRPC-Go is the Go language implementation of gRPC

CVE-2026-84304 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

MARMALADE-2-CVE-2025-67780-Exploit

MARMALADE 2/CVE-2025-67780 Exploit PoC Exploit PoCs for MARMALDE 2 CVE-2025-67780 vulnerability in Starlink Dishes Read my full blog on how I found this vulnerability and how you can make it do what you want: https://www.akawlabs.com/blog/starlink-grpc-execution I developed multiple...

SUSE SLES12 Security Update : google-osconfig-agent (SUSE-SU-2026:4292-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4292-1 advisory. - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via...

SUSE SLES15 Security Update : apptainer (SUSE-SU-2026:4308-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4308-1 advisory. - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278666. - CVE-2026-56855:...

Security update for mcphost (important)

openSUSE security update: security update for mcphost ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21886-1 Rating: important References: bsc1278853 bsc1279274 bsc1279396 Cross-References: CVE-2026-84303 CVE-2026-84304 CVE-2026-84445 CVSS scores:...

CVE-2026-53714

A flaw was found in Envoy Gateway. When operating in GatewayNamespaceMode, the xDS gRPC server fails to properly authenticate certain unary Fetch RPCs and State-of-the-World protocol messages. This oversight allows any pod with network access to port 18000 to retrieve sensitive information. An...

CVE-2026-91182

A flaw was found in open-cluster-management. An agent communicating via the gRPC broker can bypass authorization by manipulating the ce-clustername cloud event header attribute, which is used for authorization, independently of the actual event payload. This allows a registered managed cluster to...

SUSE-SU-2026:4308-1 Security update for apptainer

This update for apptainer fixes the following issues: - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278666. - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278666. - CVE-2026-78662:...

CLEANSTART-2026-GP78521 gRPC-Go is the Go language implementation of gRPC

CVE-2026-84304 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-MB62550 gRPC-Go is the Go language implementation of gRPC

CVE-2026-84303 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CVE-2026-25255

Exposed dangerous function lead to privilege escalation via gRPC server...

CVE-2026-25255 Exposed function in Qualcomm Package Manager and Qualcomm Software Center.

Exposed dangerous function lead to privilege escalation via gRPC server...

CVE-2026-25255

CVE-2026-25255 affects Qualcomm Package Manager and Qualcomm Software Center , where an exposed dangerous function in a gRPC server allows an attacker with local access and low privileges to achieve privilege escalation with a changed scope , impacting confidentiality, integrity, and availability...

CLEANSTART-2026-YY11796 gRPC-Go is the Go language implementation of gRPC

CVE-2026-84303 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-XR77764 gRPC-Go is the Go language implementation of gRPC

CVE-2026-84304 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...