CVE-2026-4282-Scanner

CVE-2026-4282-Scanner A non-intrusive, version-based vulnerability scanner for CVE-2026-4282 , affecting Keycloak and Red Hat Build of Keycloak RHBK. ⚠️ Disclaimer: This tool is intended strictly for authorized security research, penetration testing, and defensive vulnerability management. Only ru...

Improper Isolation or Compartmentalization

Overview parse-server is a version of the Parse backend that can be deployed to any infrastructure that can run Node.js. Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization via LiveQuery subscriptions that use a $or query, due to a flawed query hashing...

CVE-2026-109441

LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other...

CVE-2026-109441

LangAlpha versions through 2026.09.07 contain an improper isolation vulnerability (CWE-653) that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled. Authenticated users capable of executing code within their own sandbox can ...

CVE-2026-109441 LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridge

LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other...

CVE-2026-109441 LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridge

LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other...

CVE-2026-109441 LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridge

LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other...

EUVD-2026-104681

LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other...

PT-2026-117936

LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other...

CVE-2026-34009

An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following...

CVE-2026-34009 **Container Escape** Host user home directory mounted with write access into application container

An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following...

EUVD-2026-101985

An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following...

CVE-2026-34009

An improper isolation or compartmentalization vulnerability affects Notes Station 3 . A local attacker with administrator privileges can exploit this flaw to compromise system security. The issue is resolved in Notes Station 3 version 3.9.11 and later. No specific exploit information or in-the-wi...

PT-2026-114877

An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following...

CVE-2026-34009: Improper Isolation or Compartmentalization

An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following...

Improper Isolation or Compartmentalization

Overview ghost is a publishing platform Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization via embed card previews in the Ghost editor, which bypass the prior fix for GHSA-8vhf-xxpj-4qrg. Any staff user, including those with the Contributor role, can...

Rocky Linux 8 [CIQ] Security Update: microcode_ctl Multiple Vulnerabilities (crlsa-2021_2308)

The Rocky Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-20212308 advisory. hw: vt-d related privilege escalation CVE-2020-24489 hw: improper isolation of shared resources in some Intel Processors CVE-2020-24511 hw: observable timi...

Improper Isolation or Compartmentalization

Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization in lib/helpers/shouldBypassProxy.js, which matches NOPROXY entries by exact host or IP and has no parsing for CIDR notation, so...

Improper Isolation or Compartmentalization

Overview org.webjars.npm:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization in lib/helpers/shouldBypassProxy.js, which matches NOPROXY entries by exact host or IP and has no parsing for...

CVE-2026-101078

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of the component Landlock Backend. Such manipulation leads to improper isolation or compartmentalization. The attack must be...