CVE-2026-42506 affecting package docker-buildx for versions less than 0.14.0-13

CVE-2026-42506 affecting package docker-buildx for versions less than 0.14.0-13. A patched version of the package is available...

CVE-2026-39832 affecting package docker-buildx for versions less than 0.14.0-13

CVE-2026-39832 affecting package docker-buildx for versions less than 0.14.0-13. A patched version of the package is available...

CVE-2026-39821 affecting package containerd2 for versions less than 2.1.6-3

CVE-2026-39821 affecting package containerd2 for versions less than 2.1.6-3. A patched version of the package is available...

CVE-2026-39821 affecting package cf-cli for versions less than 8.7.11-6

CVE-2026-39821 affecting package cf-cli for versions less than 8.7.11-6. A patched version of the package is available...

CVE-2026-39821 affecting package gh for versions less than 2.62.0-16

CVE-2026-39821 affecting package gh for versions less than 2.62.0-16. A patched version of the package is available...

CVE-2026-39821 affecting package docker-compose for versions less than 2.27.0-11

CVE-2026-39821 affecting package docker-compose for versions less than 2.27.0-11. A patched version of the package is available...

CVE-2026-39821 affecting package jx for versions less than 3.10.182-4

CVE-2026-39821 affecting package jx for versions less than 3.10.182-4. A patched version of the package is available...

CVE-2026-42506 affecting package multus for versions less than 4.0.2-8

CVE-2026-42506 affecting package multus for versions less than 4.0.2-8. A patched version of the package is available...

CVE-2026-39832 affecting package docker-compose for versions less than 2.27.0-11

CVE-2026-39832 affecting package docker-compose for versions less than 2.27.0-11. A patched version of the package is available...

CVE-2026-27136 affecting package docker-buildx for versions less than 0.14.0-13

CVE-2026-27136 affecting package docker-buildx for versions less than 0.14.0-13. A patched version of the package is available...

CVE-2026-39834 affecting package docker-compose for versions less than 2.27.0-11

CVE-2026-39834 affecting package docker-compose for versions less than 2.27.0-11. A patched version of the package is available...

CVE-2026-9256 affecting package nginx for versions less than 1.28.3-4

CVE-2026-9256 affecting package nginx for versions less than 1.28.3-4. A patched version of the package is available...

CVE-2026-27136 affecting package containerd2 for versions less than 2.1.6-3

CVE-2026-27136 affecting package containerd2 for versions less than 2.1.6-3. A patched version of the package is available...

CVE-2026-42506 affecting package containerd2 for versions less than 2.1.6-3

CVE-2026-42506 affecting package containerd2 for versions less than 2.1.6-3. A patched version of the package is available...

CVE-2026-39834 affecting package nvidia-container-toolkit for versions less than 1.17.8-3

CVE-2026-39834 affecting package nvidia-container-toolkit for versions less than 1.17.8-3. A patched version of the package is available...

CVE-2026-39830 affecting package docker-buildx for versions less than 0.14.0-13

CVE-2026-39830 affecting package docker-buildx for versions less than 0.14.0-13. A patched version of the package is available...

CVE-2026-39829 affecting package docker-buildx for versions less than 0.14.0-13

CVE-2026-39829 affecting package docker-buildx for versions less than 0.14.0-13. A patched version of the package is available...

stigmem-node: Auth-disabled deployments may grant broad anonymous access outside loopback

Impact Stigmem nodes configured with authentication disabled could grant the anonymous identity broad read/write/federation capabilities if exposed outside a loopback-only local development environment. Impacted users are operators who intentionally disabled authentication while binding the node ...

CVE-2026-33384

QuickCMS allows a user's session identifier to be set before authentication. The value of this session ID stays the same after authentication. This behaviour enables an attacker to fix a session ID for a victim and later hijack the authenticated session. This issue was fixed in a patch to version...

CVE-2026-44238 FreePBX: Authenticated SQL Injection via ORDER BY in CDR Reports

FreePBX is an open source IP PBX. Prior to 16.0.50 and 17.0.11, the CDR Reports module page allows SQL injection through the order and sort POST parameters. Authentication with a FreePBX Administration Control Panel account that has CDR section access is required. Full administrator privileges ar...