CVE-2026-78414

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

CVE-2026-78414 Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

CVE-2026-78414

A cross-site scripting (XSS) vulnerability exists in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 (Linux, Windows, macOS). An adjacent-network attacker who controls a rogue Nx server on the same network segment can set that server's site name to a script p...

CVE-2026-78414 Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

EUVD-2026-64898

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

CVE-2026-78414: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

PT-2026-80899

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

GO-2026-6238 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kuma, k3s, docker, cilium, kubescape, splunk-otel-collector, hubble, vitess, hubble-ui, runc, containerd, witness, delve, nerdctl, falcoctl, gitaly...

CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kuma, k3s, docker, cilium, kubescape, splunk-otel-collector, hubble, vitess, hubble-ui, runc, containerd, witness, delve, nerdctl, falcoctl, gitaly...

GHSA-XHGW-QWWF-PG32 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kuma, k3s, docker, cilium, kubescape, splunk-otel-collector, hubble, vitess, hubble-ui, runc, containerd, witness, delve, nerdctl, falcoctl, gitaly...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kyverno, goreleaser, kyverno-fips, tekton-chains-fips, falcoctl, ratify-fips, falcoctl-fips, ratify, cloudbeat, witness, zot, policy-controller-fips, image-factory-fips, kyverno-notation-aws-fips, kyverno-policy-reporter-plugins-kyverno,...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: cri-tools, lazygit, witness, mcp-grafana, grafana-alloy, redpanda, prometheus, nfpm, teleport, dagger, nuclei, terragrunt, terraform-mcp-server, k8sgpt, malcontent, minio, weaviate, maru, gitlab-runner, k3s, opentelemetry-collector-contrib, kubevela, vcluster, grafan...

GO-2025-3660 vulnerabilities

Vulnerabilities for packages: cosign, policy-controller, kyverno-notation-aws, tfsec, trivy, conftest, spire-server, witness, kots...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: tflint, gh, trivy-operator, cosign, teleport, skaffold, neuvector-sigstore-interface, flux-source-controller, kubescape, falcoctl, gitsign, docker, kyverno-notation-aws, zarf, zot, sigstore-scaffolding, trivy, ko, tekton-chains, policy-controller, buildkitd,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: trufflehog, grafana-alloy, chezmoi, src-fingerprint, syft, steampipe, nfpm, melange, cerbos, trivy-operator, teleport, dagger, skaffold, snyk-cli, nuclei, scorecard, argo-workflows, argo-cd, argo-events, flux-source-controller, pulumi, rancher-fleet, kubescape,...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: skopeo, gitsign, witness, aactl, buildah, ratify, tekton-chains, undock, podman, kyverno-notation-aws, zarf, flux-source-controller, kyverno, falco-no-driver, slsa-verifier, kubescape, falcoctl, kots...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: tflint, chezmoi, cluster-api-azure-controller, cloudflared, syft, cilium-cli, nfpm, step, kine, trivy-operator, atlantis, skaffold, crossplane-provider-aws-eks, crossplane-provider-aws-s3, crossplane-provider-azure-managedidentity, crossplane-provider-keycloak, wal-g...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: aactl, buildah, falco-no-driver, portieris, skopeo, cosign, flux-source-controller, kubescape, falcoctl, kots, gitsign, podman, kyverno-notation-aws, zarf, slsa-verifier, sigstore-scaffolding, undock, ratify, tekton-chains, vexctl, tkn, witness...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: aactl, tflint, gh, cosign, teleport, skaffold, neuvector-sigstore-interface, flux-source-controller, kubescape, docker-cli-buildx, falcoctl, gitsign, kyverno-notation-aws, zarf, zot, sigstore-scaffolding, ko, ratify, tekton-chains, policy-controller, goreleaser,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: aactl, docker-compose, buildah, rekor, tflint, fulcio, timestamp-authority, falco-no-driver, gh, portieris, cosign, skopeo, skaffold, trivy-operator, neuvector-sigstore-interface, flux-source-controller, kubescape, falcoctl, kots, gitsign, podman, guac, xeol,...