4989 matches found
PT-2026-40720
Name of the Vulnerable Software and Affected Versions Nautobot versions prior to 2.4.33 Nautobot versions prior to 3.1.2 Description A user with permissions to add or modify a GitRepository record can use the REST API to directly set the current head field, which is not intended to be...
CVE-2026-42541
Kubewarden is a policy engine for Kubernetes. Prior to , An attacker with privileged AdmissionPolicy or AdmissionPolicyGroup create permissions which isn't the default can craft a policy that makes use of the cani host callback. The callback issues a SubjectAccessReview SAR requests to enumerate...
CVE-2026-42541
CVE-2026-42541 (Kubewarden RBAC Reconnaissance) : Affected Kubewarden versions allow an attacker with privileged AdmissionPolicy/AdmissionPolicyGroup create permissions to abuse the can_i host callback, which forwards a SubjectAccessReview (SAR) to the policy-server with elevated privileges. This...
CVE-2026-42541 Kubewarden: RBAC Reconnaissance via unchecked can_i host capability call
Kubewarden is a policy engine for Kubernetes. Prior to , An attacker with privileged AdmissionPolicy or AdmissionPolicyGroup create permissions which isn't the default can craft a policy that makes use of the cani host callback. The callback issues a SubjectAccessReview SAR requests to enumerate...
CVE-2026-42541 Kubewarden: RBAC Reconnaissance via unchecked can_i host capability call
Kubewarden is a policy engine for Kubernetes. Prior to , An attacker with privileged AdmissionPolicy or AdmissionPolicyGroup create permissions which isn't the default can craft a policy that makes use of the cani host callback. The callback issues a SubjectAccessReview SAR requests to enumerate...
CVE-2026-42541 Kubewarden: RBAC Reconnaissance via unchecked can_i host capability call
Kubewarden is a policy engine for Kubernetes. Prior to , An attacker with privileged AdmissionPolicy or AdmissionPolicyGroup create permissions which isn't the default can craft a policy that makes use of the cani host callback. The callback issues a SubjectAccessReview SAR requests to enumerate...
CVE-2026-42891
creationtimestamp| type| source ---|---|--- 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-20...
CVE-2026-41101
creationtimestamp| type| source ---|---|--- 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-20...
CVE-2026-42838
creationtimestamp| type| source ---|---|--- 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-20 2026-05-13 17:59:47+00:00| seen|...
CVE-2026-41614
creationtimestamp| type| source ---|---|--- 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-20...
CVE-2026-41100
creationtimestamp| type| source ---|---|--- 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-20...
CVE-2026-42898
creationtimestamp| type| source ---|---|--- 2026-05-12 15:53:37+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0145 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...
CVE-2026-40417
creationtimestamp| type| source ---|---|--- 2026-05-12 15:53:37+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0145 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...
CVE-2026-40363
creationtimestamp| type| source ---|---|--- 2026-05-12 15:53:28+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0144 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...
CVE-2026-33110
creationtimestamp| type| source ---|---|--- 2026-05-12 15:53:28+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0144 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...
CVE-2026-40357
creationtimestamp| type| source ---|---|--- 2026-05-12 15:53:28+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0144 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...
CVE-2026-40368
creationtimestamp| type| source ---|---|--- 2026-05-12 15:53:28+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0144 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...
CVE-2026-35436
creationtimestamp| type| source ---|---|--- 2026-05-12 15:53:28+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0144 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...
CVE-2026-40359
creationtimestamp| type| source ---|---|--- 2026-05-12 15:53:28+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0144 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...
CVE-2026-40421
creationtimestamp| type| source ---|---|--- 2026-05-12 15:53:28+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0144 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...