GO-2026-4883 vulnerabilities

Vulnerabilities for packages: gatekeeper, zot, portieris, kots, nerdctl, nuclei, amazon-cloudwatch-agent, cluster-api, amazon-cloudwatch-agent-operator, zarf, pulumi, k8sgpt, opentelemetry-operator, osv-scanner, scorecard, rancher, melange, podman, wolfictl, newrelic-infrastructure-agent,...

GO-2026-4887 vulnerabilities

Vulnerabilities for packages: gatekeeper, zot, portieris, kots, nerdctl, nuclei, amazon-cloudwatch-agent, cluster-api, amazon-cloudwatch-agent-operator, zarf, pulumi, k8sgpt, opentelemetry-operator, osv-scanner, rancher, melange, podman, wolfictl, newrelic-infrastructure-agent, rancher-agent,...

GO-2026-5668 vulnerabilities

Vulnerabilities for packages: zot, portieris, kots, nerdctl, nuclei, amazon-cloudwatch-agent, amazon-cloudwatch-agent-operator, opentelemetry-operator, osv-scanner, rancher, podman, trivy, rancher-agent, grafana-alloy, ko, kpt, spire-server, buildah, trivy-operator, undock, datadog-agent,...

GO-2026-4866 vulnerabilities

Vulnerabilities for packages: stakater-reloader, kubewatch, tailscale, flux-notification-controller, newrelic-k8s-metadata-injection, malcontent, omnibump, aws-network-policy-agent, envoy-ratelimit, rabbitmq-messaging-topology-operator, pluto, osv-scanner, nfs-subdir-external-provisioner,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kubescape-operator, knative-eventing, tetragon, rekor, crossplane-provider-family-azure, crossplane-provider-aws-route53, rancher-fleet, sftpgo-plugin-auth, omnibump, crossplane-provider-aws-rds, continuity, promxy, container-object-storage-interface,...

GO-2026-5006 vulnerabilities

Vulnerabilities for packages: kine, grype, melange, wolfictl, syft, helm, chezmoi, pulumi-language-java, openbao, prometheus, external-secrets-operator, flux-source-controller, cilium, gomplate, kyverno, nuclei, gitea, aactl, docker-machine-driver-harvester, gptscript, podman, falco-no-driver, k3...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-azure, crossplane-provider-aws-route53, kine, crossplane-provider-aws-rds, grype, crossplane-provider-keycloak, cert-manager, gatus, melange, cosign, mods, wal-g, wolfictl, crossplane-provider-aws-eks, crossplane-provider-aws-dynamodb, syft...

GO-2026-5019 vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-azure, kine, grype, cert-manager, gatus, melange, cosign, mods, wal-g, wolfictl, syft, helm, chezmoi, pulumi-language-java, openbao, glab, prometheus, external-secrets-operator, buildkitd, flux-source-controller, rancher-machine, cilium,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: git-lfs, cert-manager-istio-csr, dex, kubescape-operator, tetragon, kine, sftpgo-plugin-auth, postgres-operator, crossplane-provider-aws-rds, yunikorn-k8shim, container-object-storage-interface, kubernetes-csi-external-attacher, kapp, cert-manager-cmctl, gatus,...

Oracle Linux 8 : .NET / 10.0 (ELSA-2026-54542)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54542 advisory. 10.0.111-1.0.1 - Add support for Oracle Linux 10.0.111-1 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235478 Tenable has extract...

Oracle Linux 9 : .NET / 8.0 (ELSA-2026-54574)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54574 advisory. 8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 Tenable has extracted t...

Security Updates for Microsoft Dynamics 365 (on-premises) (August 2026)

The Microsoft Dynamics 365 on-premises is missing security updates. It is,therefore, affected by the following vulnerabilities: - Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network. CVE-2026-65815 - Exposure of...

Linux Distros Unpatched Vulnerability : CVE-2026-67986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - amazing-print/amazingprint at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArraygrep. A specially...

PT-2026-72129

Name of the Vulnerable Software and Affected Versions Red Hat Quay affected versions not specified Description A flaw exists when the SECURITY SCANNER V4 PSK pre-shared key is not configured. A remote unauthenticated attacker can send POST requests to the security scanner notification endpoint,...

CVE-2026-17177: Uncontrolled Recursion

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...

CVE-2026-16708: External Control of System or Configuration Setting

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to external control of system configuration...

CVE-2026-74243: Missing Authentication for Critical Function

A flaw was found in Red Hat Quay. When the SECURITYSCANNERV4PSK pre-shared key is not set, a remote unauthenticated attacker can send POST requests to the security scanner notification endpoint. This allows the attacker to flood the notification queue and inject path traversal characters into Cla...

CVE-2025-7639: Deserialization of Untrusted Data

The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to tamper with serialized data, potentially resulting in code execution during deserialization under the privilege of Enterprise SCADA security group "DNA Apps"...

CVE-2026-19680: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database...

Linux Distros Unpatched Vulnerability : CVE-2026-63298

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrar...