381 matches found
CLEANSTART-2026-AN01004 filippo
Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. filippo. See references for individual vulnerability details...
CLEANSTART-2026-OP90222 filippo
Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. filippo. See references for individual vulnerability details...
CVE-2026-25212
An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add data source" feature to break out of the database context and execute shell commands on the underlying operating system...
EUVD-2026-18364
An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add data source" feature to break out of the database context and execute shell commands on the underlying operating system...
CVE-2026-25212
An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add data source" feature to break out of the database context and execute shell commands on the underlying operating system...
CVE-2026-25212
An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add data source" feature to break out of the database context and execute shell commands on the underlying operating system...
CVE-2026-25212
An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add data source" feature to break out of the database context and execute shell commands on the underlying operating system...
CVE-2026-25212
An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add data source" feature to break out of the database context and execute shell commands on the underlying operating system...
PT-2026-29794
Name of the Vulnerable Software and Affected Versions Percona PMM versions prior to 3.7 Description A flaw exists in Percona PMM that allows an attacker with pmm-admin rights to execute shell commands on the underlying operating system. This is possible because an internal database user retains...
CVE-2026-25212
Percona PMM prior to 3.7 is affected. An internal database user with superuser privileges can leverage the pmm-admin authenticated Add data source flow to break out of the database context and run shell commands on the underlying OS. This is evidenced in multiple sources (e.g., Percona release no...
Percona PMM 安全漏洞
Percona PMM is a database monitoring and performance analysis platform developed by Percona, Inc. Versions of Percona PMM prior to version 3.7 contained security vulnerabilities. These vulnerabilities stemmed from internal database users retaining superuser privileges, which could allow attackers...
CVE-2026-25212
An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add data source" feature to break out of the database context and execute shell commands on the underlying operating system...
CLEANSTART-2026-AC65885 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25518, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 1.18.0-r0, 1.18.0-r1, 1.18.0-r2, 1.18.0-r3
Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-FW7P-63QQ-7HPR vulnerabilities
Vulnerabilities for packages: spire-server-fips, cg, age, terragrunt, loki, agentbeat-fips, openfga-fips, k3s, kyverno-fips, sftpgo, dgraph, ksops, step, chezmoi, gitea, step-kms-plugin-fips, step-kms-plugin, nuclei, kyverno-policy-reporter, apko-fips, argo-workflows-fips, crossplane-provider-sql...
CLEANSTART-2026-JN44153 Security fixes for GHSA-F6X5-JH6R-WRFV, GHSA-GX3X-VQ4P-MHHV, GHSA-J5W8-Q4QC-RX2X applied in versions: 1.18.0-r0, 1.19.0-r1
Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: cert-manager-openshift-routes-fips, step-issuer, mariadb-operator-fips, step-issuer-fips, cert-manager-istio-csr-fips, aws-privateca-issuer-fips, aws-privateca-issuer, gitlab-operator, cert-manager-webhook-pdns-fips, cert-manager-csi-driver, cert-manager-istio-csr,...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: opentelemetry-operator, cert-manager-webhook-pdns, cert-manager-istio-csr, cert-manager-cmctl, aws-privateca-issuer, cert-manager-csi-driver, percona-server-mongodb-operator, mariadb-operator, step-issuer...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: opentelemetry-operator, cert-manager-webhook-pdns, cert-manager-istio-csr, cert-manager-cmctl, aws-privateca-issuer, cert-manager-csi-driver, percona-server-mongodb-operator, mariadb-operator, step-issuer...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: cert-manager-openshift-routes-fips, step-issuer, mariadb-operator-fips, step-issuer-fips, cert-manager-istio-csr-fips, aws-privateca-issuer-fips, aws-privateca-issuer, gitlab-operator, cert-manager-webhook-pdns-fips, cert-manager-csi-driver, cert-manager-istio-csr,...