CVE-2026-25212

CVE-2026-25212 – Percona PMM RCE PoC Critical – CVSS 9.9 – Authenticated Remote Code Execution in PMM 3.7. Description This proof‑of‑concept exploits a vulnerability where an internal PostgreSQL user in PMM retains 'SUPERUSER' privileges. An authenticated attacker with 'pmm-admin' rights can abus...

mysqld_safe-CVE-2016-6662-patch

MySQL server CVE-2016-6662 patch playbook How it works It adds the Percona fix to the mysqldsafe file. Which operating systems are supported CentOS FreeBSD How to use it ansible-playbook mysqld-safe-patch.yml...

CVE-2021-27928-POC

CVE-2021-27928 POC Description A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval...

CVE-2021-27928

Information Exploit Title: MariaDB 10.2 /MySQL - 'wsrepprovider' OS Command Execution Date: 03/18/2021 Exploit Author: Central InfoSec Version: MariaDB 10.2 before 10.2.37 10.3 before 10.3.28 10.4 before 10.4.18 10.5 before 10.5.9 Percona Server through 2021-03-03; and the wsrep patch through...

PT-2026-117130

These are all security issues fixed in the percona-toolkit-3.7.1.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12166-1 percona-toolkit-3.7.1.4-1.1 on GA media

These are all security issues fixed in the percona-toolkit-3.7.1.4-1.1 package on the GA media of openSUSE Tumbleweed...

GO-2026-6488 vulnerabilities

Vulnerabilities for packages: grafana, grafana-fips, grafana-geomys-fips, percona-grafana, commercial-grafana...

CLEANSTART-2026-LX31883 Security fix for GHSA-gx3x-vq4p-mhhv applied in: cert-manager-cmctl 2.3.0-r1, cert-manager-cmctl-fips 2.4.0-r2, percona-xtradb-cluster-operator 1.19.0-r1, percona-xtradb-cluster-operator-fips 1.19.0-r1

GHSA-gx3x-vq4p-mhhv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OJ21892 Security fix for CVE-2026-25518 applied in: cert-manager-cmctl-fips 2.4.0-r2, percona-xtradb-cluster-operator 1.18.0-r1, percona-xtradb-cluster-operator-fips 1.18.0-r1, step-issuer 0.9.11-r1

CVE-2026-25518 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer-fips, mariadb-operator, cert-manager-csi-driver-fips, percona-server-mongodb-operator-fips, opentelemetry-operator-fips, cert-manager-csi-driver, cert-manager-webhook-pdns-fips, cert-manager-cmctl-fips, percona-xtradb-cluster-operator-fips,...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, mariadb-operator, step-issuer, cert-manager-cmctl, opentelemetry-operator, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-csi-driver, cert-manager-istio-csr...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kapp-controller, azcopy, terraform-provider-azurerm, crossplane-provider-aws-elasticache, crossplane-provider-aws-kms, paranoia, cloud-provider-azure, aws-node-termination-handler, crossplane-provider-aws-sns, tofu-controller, sftpgo-plugin-pubsub, consul-k8s,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: thanos-operator, cloud-provider-azure, kustomize, amass, goreleaser, newrelic-nri-statsd, mockery, rancher-agent, dex, percona-server-mongodb-operator, rook, spicedb-operator, argo-cd, hubble, aws-signer-notation-plugin, rancher-webhook, cert-exporter,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kapp-controller, azcopy, thanos-operator, crossplane-provider-aws-elasticache, paranoia, mods, kine, crossplane-provider-aws-sns, tofu-controller, sftpgo-plugin-pubsub, hubble-ui, sealed-secrets, kustomize, amass, gke-gcloud-auth-plugin, goreleaser,...

CLEANSTART-2026-SP46945 Security fixes in percona-server-mongodb-operator 1.23.0-r0

Package percona-server-mongodb-operator version 1.23.0-r0 fixes 22 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-UX09480 Security fixes in percona-xtradb-cluster-operator 1.18.0-r2

Package percona-xtradb-cluster-operator version 1.18.0-r2 fixes 1 vulnerabilities: CVE-2026-26958...

CLEANSTART-2026-LM86108 Security fixes in percona-xtradb-cluster-operator-fips 1.16.1-r0

Package percona-xtradb-cluster-operator-fips version 1.16.1-r0 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...

CLEANSTART-2026-YN68631 Security fixes in percona-xtradb-cluster-operator 1.19.1-r0

Package percona-xtradb-cluster-operator version 1.19.1-r0 fixes 2 vulnerabilities: ghsa-pc3f-x583-g7j2, CVE-2026-35469...

CLEANSTART-2026-CN16573 Security fixes in percona-server-mongodb-operator 1.22.0-r1

Package percona-server-mongodb-operator version 1.22.0-r1 fixes 32 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831...

CLEANSTART-2026-ND31418 Security fixes in percona-xtradb-cluster-operator 1.19.1-r1

Package percona-xtradb-cluster-operator version 1.19.1-r1 fixes 9 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...