CVE-2026-70495

A flaw was found in search-v2-operator. This component's search-serviceaccount has overly broad permissions, allowing it to impersonate users and groups across the entire cluster. If an attacker gains access to any of the pods running under this service account, they could exploit this to achieve...

ANT-2026-V6YZYDKK · FreeType2 · Stack Buffer Overflow

stack-buffer-overflow medium Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-V6YZYDKK: Stack buffer overflow via pop aft...

GHSA-QCPP-8X79-HHP3 Glances has a command injection bypass of action-template sanitizer via cross-field shell-operator reconstruction

Summary The Glances action system lets an administrator configure shell commands that run when a monitoring threshold is crossed. The command is a Mustache template whose variables are filled with runtime stat fields such as a process name, a container name or a filesystem mount point. Those fiel...

CVE-2026-68518 Glances: Command injection bypass of action-template sanitizer via cross-field shell-operator reconstruction

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, sanitizemustachedict in glances/actions.py sanitizes individual Mustache values before chevron.render, allowing adjacent unescaped Mustache variables to reconstruct shell operators that securepopen executes when...

EUVD-2026-60265

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, sanitizemustachedict in glances/actions.py sanitizes individual Mustache values before chevron.render, allowing adjacent unescaped Mustache variables to reconstruct shell operators that securepopen executes when...

CVE-2026-68518 Glances: Command injection bypass of action-template sanitizer via cross-field shell-operator reconstruction

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, sanitizemustachedict in glances/actions.py sanitizes individual Mustache values before chevron.render, allowing adjacent unescaped Mustache variables to reconstruct shell operators that securepopen executes when...

CVE-2026-68518 Glances: Command injection bypass of action-template sanitizer via cross-field shell-operator reconstruction

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, sanitizemustachedict in glances/actions.py sanitizes individual Mustache values before chevron.render, allowing adjacent unescaped Mustache variables to reconstruct shell operators that securepopen executes when...

BIT-MONGODB-2026-13064 MongoDB $jsonSchema Query Operator Excessive CPU Consumption Leading to Denial of Service

Certain query operations involving deeply nested $jsonSchema constructs can trigger disproportionate CPU consumption in affected MongoDB deployments, potentially leading to resource exhaustion. The resulting CPU-bound operation cannot be interrupted through standard administrative controls...

PT-2026-76762

Name of the Vulnerable Software and Affected Versions search-v2-operator affected versions not specified Description A flaw exists in the search-v2-operator where the search-serviceaccount is assigned overly broad permissions. This allows for the impersonation of users and groups across the entir...

CVE-2026-70495: Improper Privilege Management

A flaw was found in search-v2-operator. This component's search-serviceaccount has overly broad permissions, allowing it to impersonate users and groups across the entire cluster. If an attacker gains access to any of the pods running under this service account, they could exploit this to achieve...

CVE-2026-73060: Allocation of Resources Without Limits or Throttling

Scriban versions from 3.0.0 through 7.2.5 contain a denial of service vulnerability in the ScriptRange.Multiply operator that bypasses LoopLimit when the left operand is a lazy sequence. Attackers can supply templates with array multiplication on lazy sequences to execute billions of uncharged...

CVE-2026-17087: Missing Authorization

The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-73062: Allocation of Resources Without Limits or Throttling

Scriban versions 3.0.0 through 7.2.0 contain a denial of service vulnerability in the array multiplication operator that allocates memory without enforcing LoopLimit or overflow-safe arithmetic checks. Attackers can supply a large integer multiplier in a template to force multi-gigabyte memory...

GHSA-C974-W86C-VPFW vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql, crossplane-provider-aws-cloudfront, pgtimetable, opentofu, terraform, conftest, flyte, containerd, seaweedfs, kuma, kubernetes-csi-external-provisioner, podinfo, step-kms-plugin, terraform-mcp-server, net-kourier, weaviate, mattermost,...

CVE-2026-73043: Improper Neutralization of Input During Web Page Generation

SiYuan versions before v3.7.4 contain a remote code execution vulnerability in the Template calculation operator, which renders user-authored Go templates and stores output verbatim without sanitization. Attackers can inject malicious HTML and JavaScript into template calculations that execute in...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: kapp, kuberay-operator, kbld, podinfo, weaviate, mattermost, kubeflow-pipelines, crossplane-provider-aws-eks, falcosidekick, aws-load-balancer-controller, frp, witness, crossplane-provider-aws-kinesis, juicefs-csi-driver, otel-cli, go-licenses,...

GO-2026-6090 vulnerabilities

Vulnerabilities for packages: kapp, kuberay-operator, kbld, podinfo, weaviate, mattermost, kubeflow-pipelines, crossplane-provider-aws-eks, falcosidekick, aws-load-balancer-controller, frp, witness, crossplane-provider-aws-kinesis, juicefs-csi-driver, otel-cli, go-licenses,...

CVE-2026-71571

Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda 2.0.0-4.0.11 - Backend operators with permissions to access iCagenda could inject SQL...

CVE-2026-71570 Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11

Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration 2.0.0-4.0.11 - A backend operator granted access scoped to comicagenda only could enumerate Joomla user profiles...

EUVD-2026-58805

Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration 2.0.0-4.0.11 - A backend operator granted access scoped to comicagenda only could enumerate Joomla user profiles...