CVE-2026-19821

A vulnerability was determined in Tenda AC12 15.03.06.23multiTD01. This vulnerability affects the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg of the component httpd web management interface. This manipulation of the argument rebootTime causes buffer overflow. The attack ma...

GO-2026-4316 vulnerabilities

Vulnerabilities for packages: aws-lambda-runtime-interface-emulator-fips, aws-lambda-runtime-interface-emulator, cloudbeat-fips, kyverno-fips, custom-pod-autoscaler, custom-pod-autoscaler-fips, commercial-kyverno, cloudbeat, fleet-server-fips...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: tkn-fips, grafana-fips, zitadel, bank-vaults, kyverno-notation-aws-fips, jitsucom-bulker, k9s-fips, docker-compose-fips, neuvector-sigstore-interface-fips, mattermost-fips, pluto-fips, boring-registry-fips, istio-fips, kyverno, beats-fips, grafana, beats, ratify-fips...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: spire-server, tkn-fips, neuvector-sigstore-interface, ko, kubescape, flux-source-controller, goreleaser, policy-controller-fips, apko, gitsign, spire-server-fips, zot, zarf, chainctl, tkn, skaffold, tekton-chains, falcoctl, vexctl, slsa-verifier, policy-controller,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: tkn, cosign, trivy-operator, sigstore-scaffolding, gh, docker, kubescape, witness, buildkitd, vexctl, neuvector-sigstore-interface, ko, kyverno-notation-aws, zot, policy-controller, zarf, gitsign, goreleaser, spire-server, teleport, tflint, trivy, skaffold,...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: tkn, trivy-operator, slsa-verifier, kubescape, kyverno, aactl, neuvector-sigstore-interface, ko, kyverno-notation-aws, policy-controller, zarf, ratify, gitsign, goreleaser, spire-server, teleport, tflint, crossplane, falcoctl, tekton-chains...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, mattermost, terraform-provider-acme, chezmoi, tkn, argo-events, argocd-image-updater, crossplane-provider-keycloak, witness, rancher-agent, atlantis, kubernetes, terraform-provider-azapi, crossplane-provider-aws-kinesis, hcloud,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: undock, portieris, tkn, cosign, buildah, trivy-operator, sigstore-scaffolding, slsa-verifier, gh, kubescape, witness, podman, buildkitd, skopeo, docker-compose, vexctl, aactl, guac, neuvector-sigstore-interface, ko, kyverno-notation-aws, zot, policy-controller, zarf,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: tkn, cosign, trivy-operator, sigstore-scaffolding, slsa-verifier, gh, docker, kubescape, docker-cli-buildx, witness, kyverno, buildkitd, vexctl, aactl, neuvector-sigstore-interface, ko, kyverno-notation-aws, zot, policy-controller, zarf, ratify, gitsign, goreleaser,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: tkn, cosign, sigstore-scaffolding, gh, kubescape, witness, docker-cli-buildx, vexctl, aactl, neuvector-sigstore-interface, ko, kyverno-notation-aws, zot, policy-controller, zarf, ratify, gitsign, goreleaser, spire-server, teleport, tflint, skaffold,...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: tkn, cosign, trivy-operator, slsa-verifier, gh, kubescape, witness, buildkitd, vexctl, aactl, neuvector-sigstore-interface, ko, kyverno-notation-aws, zot, policy-controller, zarf, ratify, gitsign, goreleaser, spire-server, teleport, tflint, trivy, skaffold,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: nova, undock, grafana-rollout-operator, kubernetes-dashboard-api, tkn, argo-events, emissary, controller-gen, witness, terraform-provider-azapi, rancher-system-agent, aws-otel-collector, kapp, nri-mysql, guac, nri-rabbitmq, kyverno-notation-aws, aws-privateca-issuer,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: tkn, cosign, trivy-operator, sigstore-scaffolding, slsa-verifier, gh, docker, kubescape, witness, buildkitd, vexctl, aactl, neuvector-sigstore-interface, ko, kyverno-notation-aws, zot, policy-controller, zarf, ratify, rekor, gitsign, goreleaser, spire-server, telepor...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: tkn, cosign, trivy-operator, sigstore-scaffolding, slsa-verifier, gh, docker, kubescape, witness, buildkitd, vexctl, aactl, neuvector-sigstore-interface, ko, kyverno-notation-aws, zot, policy-controller, zarf, ratify, rekor, gitsign, goreleaser, spire-server, telepor...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: terragrunt, kubernetes-event-exporter, terraform, step-ca, flux-image-reflector-controller, tkn, ksops, cosign, k3s, argo-events, crossplane-provider-azure-storage, sigstore-scaffolding, slsa-verifier, gh, kubescape, scorecard, flux, crossplane-provider-azure-sql,...

CVE-2026-19791

A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component httpd web management interface. Executing a manipulation of the argument staticRouteNet can lead to stack-based buffer overflow. The attack ma...

CVE-2026-19790

A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...

CVE-2026-19788

A vulnerability was found in Tenda AC1206 15.03.06.23multiTD01. This affects the function setdevicename of the file /goform/SetOnlineDevName of the component httpd web management interface. The manipulation of the argument devName results in stack-based buffer overflow. The attack may be launched...

CVE-2026-19792

A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/module of the component httpd web management interface. Performing a manipulation of the argument portMappingServer/porMappingtInternal/portMappingExternal results in buffer...

EUVD-2026-58584

A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component httpd web management interface. Executing a manipulation of the argument staticRouteNet can lead to stack-based buffer overflow. The attack ma...