6107 matches found
CVE-2026-71417
creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:05+00:00| published-proof-of-concept| https://github.com/Netflix/lemur/security/advisories/GHSA-pxmc-2ffp-8j67...
CVE-2026-55166 Lemur: any SSO-authenticated user achieves AWS IAM compromise and permanent PKI key access via ACME acme_url SSRF and creator-equality IDOR
Lemur manages TLS certificate creation. Prior to 1.9.2, authenticated users could influence an ACME authority acmeurl without an effective server-side destination restriction and trigger AcmeHandler.setupacmeclient to make backend requests. An attacker could target cloud instance metadata or...
CVE-2026-55166 Lemur: any SSO-authenticated user achieves AWS IAM compromise and permanent PKI key access via ACME acme_url SSRF and creator-equality IDOR
Lemur manages TLS certificate creation. Prior to 1.9.2, authenticated users could influence an ACME authority acmeurl without an effective server-side destination restriction and trigger AcmeHandler.setupacmeclient to make backend requests. An attacker could target cloud instance metadata or...
CVE-2026-55166 Lemur: any SSO-authenticated user achieves AWS IAM compromise and permanent PKI key access via ACME acme_url SSRF and creator-equality IDOR
Lemur manages TLS certificate creation. Prior to 1.9.2, authenticated users could influence an ACME authority acmeurl without an effective server-side destination restriction and trigger AcmeHandler.setupacmeclient to make backend requests. An attacker could target cloud instance metadata or...
CVE-2026-55166
A low-privilege SSO-authenticated user chains three flaws in Netflix Lemur prior to 1.9.2: an unfiltered acme_url SSRF to AWS IMDS (CWE-918) exfiltrates worker STS credentials, while a creator-equality IDOR (CWE-639) at certificates/views.py:734 grants permanent private-key access after ownership...
ANT-2026-W77T9B29 · supabase/postgres · other
other medium Severity Claude medium · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-W77T9B29: CI downloads unverified binary then assumes production AWS role The qemu-image-build GitHub Actions...
USN-8629-2 linux-aws-7.0 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Network traffic control; - IPv4 networking; - IPv6...
Deserialization Of Untrusted Data
Apache Camel PQC Component is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to AwsSecretsManagerKeyLifecycleManager.deserializeMetadata deserializing attacker-controlled data with ObjectInputStream.readObject without an ObjectInputFilter or class allow-list, allowing a...
CVE-2026-56860 vulnerabilities
Vulnerabilities for packages: percona-server-mongodb-operator, victoriametrics-cluster, flux-source-controller, terraform-provider-azapi, lvm-driver, mariadb-operator, lazygit, spire-controller-manager, containerd, cloud-provider-aws, scorecard, hubble, grpcurl, bank-vaults, trino, spegel,...
GO-2026-6218 vulnerabilities
Vulnerabilities for packages: percona-server-mongodb-operator, victoriametrics-cluster, flux-source-controller, terraform-provider-azapi, lvm-driver, mariadb-operator, lazygit, spire-controller-manager, containerd, cloud-provider-aws, scorecard, hubble, grpcurl, bank-vaults, trino, spegel,...
GO-2026-5575 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, kyverno-notation-aws-fips, commercial-kyverno, kyverno...
GO-2025-3652 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws...
GO-2026-5594 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, commercial-kyverno, kyverno, kyverno-fips, kyverno-notation-aws-fips...
GO-2026-5374 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, kyverno-fips, kyverno-notation-aws-fips, kyverno...
GO-2026-5371 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, kyverno-notation-aws-fips...
GO-2026-5268 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, kyverno-notation-aws-fips, commercial-kyverno...
GO-2026-5337 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, commercial-kyverno, kyverno, kyverno-fips, kyverno-notation-aws-fips...
GO-2026-5621 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws-fips, commercial-kyverno...