CVE-2026-18611

The CVE-2026-18611 entry affects the Data Science Pipelines Operator. The root cause is the use of a cryptographically weak pseudo-random number generator to generate credentials (MariaDB root/user passwords and MinIO access/secret keys). An unauthenticated attacker who can access the MinIO Route...

CVE-2026-18611 Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials

A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive sensitive credentials, such as MariaDB root/user passwords and MinIO access/secret keys, if they can access the MinIO Route or MariaDB Service. The flaw occurs because the...

Akkadian Provisioning Manager Multiple Vulnerabilities Disclosure (Fixed)

Over the course of routine security research, Rapid7 researchers discovered that the Akkadian Provisioning Manager version 4.50.18, a provisioning solution for a Cisco Unified Communications environment, has a trio of vulnerabilities, which, when combined, can lead to remote code execution on the...