CVE-2026-26055

Yoke is a Helm-inspired infrastructure-as-code IaC package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller ATC component of Yoke. The ATC webhook endpoints lack proper authentication mechanisms, allowing any pod within the cluster network to directly send...

PT-2026-1468

Name of the Vulnerable Software and Affected Versions Theater for WordPress versions prior to 0.19 Description An issue exists in Theater for WordPress related to incorrectly configured access control security levels, allowing for missing authorization. The issue allows exploitation of these...