GO-2026-5224 vulnerabilities

Vulnerabilities for packages: rancher-agent, rancher, azure-service-operator...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, tempo, ratify, gptscript, prometheus-operator, kubernetes-csi-driver-hostpath, bom, harbor-cli, opa, wait-for-port, rancher-system-upgrade-controller, render-template, step-kms-plugin, rclone, kubernetes-dashboard-web, tflint, kind,...

EUVD-2026-54324

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...

CVE-2026-50515

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...

CVE-2026-50515 Azure Service Bus Remote Code Execution Vulnerability

...

CVE-2026-50515 Azure Service Bus Remote Code Execution Vulnerability

...

CVE-2026-50515

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-50515

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...

Azure Service Bus Remote Code Execution Vulnerability

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...

KLA91193 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure Service Bus can be exploited...

PYSEC-2026-2344 Apache Airlfow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access

The accesskey and connectionstring connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidently logged to logs, those values could be seen in the logs. Azure...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-opensearch-fips, kube-state-metrics, kyverno-policy-reporter-plugins-kyverno-fips, nerdctl, commercial-expanso-edge, crossplane-provider-azure-authorization, trivy-operator, rootlesskit-fips, crossplane-provider-aws-s3control-fips,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-opensearch-fips, kube-state-metrics, commercial-expanso-edge, crossplane-provider-azure-authorization, kubevela, terraform-provider-grafana, kube-metrics-adapter-fips, trillian-fips, trivy-operator, ucd, crossplane-provider-aws-s3control-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-opensearch-fips, kube-state-metrics, commercial-expanso-edge, crossplane-provider-azure-authorization, kubevela, terraform-provider-grafana, kube-metrics-adapter-fips, trillian-fips, trivy-operator, ucd, crossplane-provider-aws-s3control-fips,...

CVE-2026-25219

The accesskey and connectionstring connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidentaly logged to logs, those values could be seen in the logs. Azure...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: rke2-cloud-provider-fips, azure-service-operator, spqr, commercial-expanso-edge, trillian-fips, envoy-gateway, spicedb-fips, harbor-fips, chainloop-control-plane, gitness, gitlab-cng-fips, keda-fips, vault, bento-fips, seaweedfs, zitadel, falcosidekick-fips,...

BIT-AIRFLOW-2026-25219 Apache Airflow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access

The accesskey and connectionstring connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidentaly logged to logs, those values could be seen in the logs. Azure...

EUVD-2026-22921

The accesskey and connectionstring connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidentaly logged to logs, those values could be seen in the logs. Azure...

Apache Airlfow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access

The accesskey and connectionstring connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidently logged to logs, those values could be seen in the logs. Azure...

GHSA-4G48-54Q2-FG7Q Apache Airlfow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access

The accesskey and connectionstring connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidently logged to logs, those values could be seen in the logs. Azure...