CVE-2026-108140

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...

CVE-2026-108141

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...

EUVD-2026-111124

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...

CVE-2026-108140

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...

CVE-2026-108141

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...

EUVD-2026-111118

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...

CVE-2026-108140

This vulnerability allows an authenticated user with the Restore Operator role to perform a relative path traversal attack. If the user also controls the contents of a backed-up NAS share , they can write attacker-controlled files to an arbitrary path on the backup server. No specific software ve...

CVE-2026-108141

An authenticated user with the Restore Operator role can exploit a relative path traversal vulnerability to write attacker-controlled files to an arbitrary path on the backup server. This attack is possible if the user also controls the contents of a backed-up NAS share . The vulnerability is cat...

PT-2026-126658

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...

PT-2026-126659

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...

GO-2026-6629 vulnerabilities

Vulnerabilities for packages: kube-bench, timescaledb-parallel-copy-fips, timescaledb-parallel-copy, trino, ingress-nginx-controller, tigera-operator, grafana, wavefront-collector-for-kubernetes, grafana-fips, commercial-gitlab-workhorse-ee, commercial-gitlab-workhorse-ee-fips, ldap2pg, vault-fip...

CVE-2026-56851 vulnerabilities

Vulnerabilities for packages: kube-bench, timescaledb-parallel-copy-fips, timescaledb-parallel-copy, trino, ingress-nginx-controller, tigera-operator, grafana, wavefront-collector-for-kubernetes, grafana-fips, commercial-gitlab-workhorse-ee, commercial-gitlab-workhorse-ee-fips, ldap2pg, vault-fip...

GO-2026-4591 vulnerabilities

Vulnerabilities for packages: backup-restore-operator, backup-restore-operator-fips...

GO-2025-4116 vulnerabilities

Vulnerabilities for packages: falco-no-driver, k3s, cert-manager-fips, terraform, etcd, rke2-runtime-fips, kube-conformance, etcd-fips, gitlab-rails-ce, backup-restore-operator, gitlab-rails-ce-fips, vault, consul-k8s...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: trivy, elastic-agent-fips, trivy-operator-fips, terraform, argo-workflows, argo-workflows-fips, seaweedfs-rocksdb-fips, frankenphp-8.5, grafana, gitlab-rails-ce-fips, k9s-fips, kubernetes-fips, zarf-fips, external-secrets-operator-fips, kubernetes, reports-server, ka...

CVE-2025-62879 vulnerabilities

Vulnerabilities for packages: backup-restore-operator, backup-restore-operator-fips...

GHSA-WJ3P-5H3X-C74Q vulnerabilities

Vulnerabilities for packages: backup-restore-operator, backup-restore-operator-fips...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: kargo, trivy-operator-fips, cilium-envoy, argo-workflows, gitlab-rails-ce-fips, atlas, commercial-chainloop-backend, kaf, gitlab-rails-ce, cluster-autoscaler, trivy-fips, syft, zitadel, kube-conformance, juicefs, flux-helm-controller, k3s,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: kargo, trivy-operator-fips, cilium-envoy, argo-workflows, gitlab-rails-ce-fips, atlas, commercial-chainloop-backend, kaf, gitlab-rails-ce, cluster-autoscaler, trivy-fips, syft, zitadel, kube-conformance, juicefs, flux-helm-controller, k3s,...

Backup and Restore Operator log information leakage vulnerability

Backup and Restore Operator is an open-source Kubernetes application for backup and restoration. The Backup and Restore Operator has a vulnerability related to log information leakage, which stems from the S3 tokens being leaked into the logs of the rancher-backup-operator pod...