CLEANSTART-2026-OZ55229 Security fixes in vertical-pod-autoscaler 1.6.0-r2

Package vertical-pod-autoscaler version 1.6.0-r2 fixes 1 vulnerabilities: CVE-2026-41178...

CLEANSTART-2026-KX17765 Security fixes in kuberay-operator 1.6.2-r2

Package kuberay-operator version 1.6.2-r2 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-AY55625 Security fixes in rancher-agent 2.13.7-r2

Package rancher-agent version 2.13.7-r2 fixes 7 vulnerabilities: CVE-2026-50163, CVE-2026-48978, CVE-2026-50151, CVE-2026-50162, ghsa-vh4v-2xq2-g5cg...

CLEANSTART-2026-SI62539 Security fixes in kuberay-operator 1.4.2-r2

Package kuberay-operator version 1.4.2-r2 fixes 12 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-KH89311 Security fixes in rancher-fleet-agent 0.15.4-r2

Package rancher-fleet-agent version 0.15.4-r2 fixes 29 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-PB67247 Security fixes in temporal-server 1.30.6-r2

Package temporal-server version 1.30.6-r2 fixes 11 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-ME39024 Security fixes in temporal-server 1.29.7-r2

Package temporal-server version 1.29.7-r2 fixes 7 vulnerabilities: CVE-2026-5724, CVE-2025-14987, CVE-2025-14986, CVE-2026-5199, ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-NY04600 Security fixes in argo-cd 3.3.14-r2

Package argo-cd version 3.3.14-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

CLEANSTART-2026-RY87844 Security fixes in langfuse-worker 3.221.1-r2

Package langfuse-worker version 3.221.1-r2 fixes 11 vulnerabilities: ghsa-55q2-fjhq-7xh7, ghsa-c2j3-45gr-mqc4, ghsa-7rqj-j65f-68wh, ghsa-xmf8-cvqr-rfgj, ghsa-x445-f3h2-j279...

CLEANSTART-2026-IB62904 Security fixes in temporal-server 1.28.4-r2

Package temporal-server version 1.28.4-r2 fixes 15 vulnerabilities: CVE-2026-39821, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858...

CLEANSTART-2026-SZ08550 Security fixes in rancher-agent 2.12.11-r2

Package rancher-agent version 2.12.11-r2 fixes 8 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-50163, CVE-2026-48978, CVE-2026-50151...

CLEANSTART-2026-KE44477 Security fixes in langfuse-worker 3.194.1-r2

Package langfuse-worker version 3.194.1-r2 fixes 1 vulnerabilities: ghsa-9mqv-5hh9-4cgg...

CLEANSTART-2026-DZ45567 Security fixes in atlantis-fips 0.45.0-r2

Package atlantis-fips version 0.45.0-r2 fixes 1 vulnerabilities: CVE-2026-56864...

CLEANSTART-2026-WY48690 Security fixes in argo-cd 3.4.7-r2

Package argo-cd version 3.4.7-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

CLEANSTART-2026-EJ28023 Security fixes in langfuse 4.9.0-r2

Package langfuse version 4.9.0-r2 fixes 1 vulnerabilities: CVE-2026-67213...

CLEANSTART-2026-EC97009 Security fixes in argo-cd 3.4.5-r2

Package argo-cd version 3.4.5-r2 fixes 3 vulnerabilities: ghsa-hrxh-6v49-42gf, ghsa-259r-337f-4rfw, CVE-2026-41178...

CLEANSTART-2026-ZL88859 Security fixes in fulcio-fips 1.7.1-r2

Package fulcio-fips version 1.7.1-r2 fixes 28 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CVE-2026-14953 Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is Missing Authorization due to improper enforcement of role-based access control

A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all.php...

CVE-2026-14952

Frauscher's FDS102 web server exposes sensitive railway signaling and track layout data — including /FdsBackup.zip and files under /downloads/* — without authentication over HTTP. CVSS 8.7 (HIGH) reflects high confidentiality impact; no integrity or availability effects. No patch or workaround is...

CVE-2026-14952 Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is offering files with sensitive information for download without requiring authentication

An unauthenticated remote attacker can retrieve sensible files from the FDS Web server, such as the backup archive at /FdsBackup.zip and additional files under /downloads/, directly over HTTP without a valid session. These files disclose detailed railway signaling and track layout information tha...