netbox v4.7.1

The cornerstone of every automated network NetBox Community | NetBox Cloud | NetBox Enterprise NetBox exists to empower network engineers. Since its release in 2016, it has become the go-to solution for modeling and documenting network infrastructure for thousands of organizations worldwide. As a...

CVE-2026-69694

Deserialization of untrusted data in Windows IP Address Management IPAM Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73043

Deserialization of untrusted data in Windows IP Address Management IPAM Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69694

CVE-2026-69694 affects the Windows IP Address Management (IPAM) Service . The root cause is deserialization of untrusted data , which allows an authorized attacker to escalate privileges locally. The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating tha...

Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability

Deserialization of untrusted data in Windows IP Address Management IPAM Service allows an authorized attacker to elevate privileges locally...

PT-2026-87665

Name of the Vulnerable Software and Affected Versions Windows IP Address Management IPAM Service affected versions not specified Description Deserialization of untrusted data in the Windows IP Address Management IPAM Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69694: Deserialization of Untrusted Data

Deserialization of untrusted data in Windows IP Address Management IPAM Service allows an authorized attacker to elevate privileges locally...

OpenWISP IPAM has broken object-level authorization: ExportSubnetView lets a member of one organization export another organization's subnet and all its IP addresses

Summary OpenWISP IPAM is multi-tenant: every Subnet belongs to an organization, and API access is scoped to the organizations a user belongs to. The CSV export endpoint, ExportSubnetView, omits the organization-membership check that its import sibling performs, and loads the subnet by primary key...

GHSA-X287-5C68-36WP OpenWISP IPAM has broken object-level authorization: ExportSubnetView lets a member of one organization export another organization's subnet and all its IP addresses

Summary OpenWISP IPAM is multi-tenant: every Subnet belongs to an organization, and API access is scoped to the organizations a user belongs to. The CSV export endpoint, ExportSubnetView, omits the organization-membership check that its import sibling performs, and loads the subnet by primary key...

Missing Authorization

Overview openwisp-ipam is an IP address space administration module of OpenWISP. Affected versions of this package are vulnerable to Missing Authorization via the ExportSubnetView process. An attacker can access sensitive information belonging to other organizations by submitting an export reques...

netbox v4.6.9

The cornerstone of every automated network NetBox Community | NetBox Cloud | NetBox Enterprise NetBox exists to empower network engineers. Since its release in 2016, it has become the go-to solution for modeling and documenting network infrastructure for thousands of organizations worldwide. As a...

PT-2026-86431

Summary OpenWISP IPAM is multi-tenant: every Subnet belongs to an organization, and API access is scoped to the organizations a user belongs to. The CSV export endpoint, ExportSubnetView, omits the organization-membership check that its import sibling performs, and loads the subnet by primary key...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim, flux-helm-controller, datadog-operator, cluster-api-ipam-provider-in-cluster, cluster-api-aws-controller, cluster-api-helm-controller, helm-operator, cluster-api-azure-controller, datadog-agent, kube-state-metrics, opentelemetry-operator,...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: calico, k3s, buildkitd, azure-ipam, rootlesskit, istio, datadog-agent, docker, buildah, podman, multus-cni, nerdctl, flannel, kuma, containerd...

netbox v4.6.8

The cornerstone of every automated network NetBox Community | NetBox Cloud | NetBox Enterprise NetBox exists to empower network engineers. Since its release in 2016, it has become the go-to solution for modeling and documenting network infrastructure for thousands of organizations worldwide. As a...

netbox v4.6.7

The cornerstone of every automated network NetBox Community | NetBox Cloud | NetBox Enterprise NetBox exists to empower network engineers. Since its release in 2016, it has become the go-to solution for modeling and documenting network infrastructure for thousands of organizations worldwide. As a...

SUSE CVE-2026-41185

When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...

netbox v4.6.6

The cornerstone of every automated network NetBox Community | NetBox Cloud | NetBox Enterprise NetBox exists to empower network engineers. Since its release in 2016, it has become the go-to solution for modeling and documenting network infrastructure for thousands of organizations worldwide. As a...

netbox v4.6.5

The cornerstone of every automated network NetBox Community | NetBox Cloud | NetBox Enterprise NetBox exists to empower network engineers. Since its release in 2016, it has become the go-to solution for modeling and documenting network infrastructure for thousands of organizations worldwide. As a...

CVE-2026-47190

The CVE concerns IPAM (Metal3) where the IPAM controller’s ClusterRole granted full CRUD access to core/v1 Secrets prior to versions 1.11.7, 1.12.4, and 1.13.0. Although the controller does not access Secrets during normal operation, a compromised IPAM pod (e.g., via supply‑chain attack or contai...