CVE-2026-39829 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-39829 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-29181 affecting package etcd for versions less than 3.5.30-2

CVE-2026-29181 affecting package etcd for versions less than 3.5.30-2. A patched version of the package is available...

CVE-2026-39835 affecting package moby-engine for versions less than 25.0.3-18

CVE-2026-39835 affecting package moby-engine for versions less than 25.0.3-18. A patched version of the package is available...

CVE-2026-42502 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-42502 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-44283 affecting package etcd for versions less than 3.5.30-2

CVE-2026-44283 affecting package etcd for versions less than 3.5.30-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-25680 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

CVE-2026-25680 affecting package sriov-network-device-plugin for versions less than 3.7.0-6. A patched version of the package is available...

CVE-2026-39821 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

CVE-2026-39821 affecting package sriov-network-device-plugin for versions less than 3.7.0-6. A patched version of the package is available...

CVE-2026-42506 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

CVE-2026-42506 affecting package sriov-network-device-plugin for versions less than 3.7.0-6. A patched version of the package is available...

CVE-2026-39827 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-39827 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-39830 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-39830 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-46597 affecting package moby-engine for versions less than 25.0.3-18

CVE-2026-46597 affecting package moby-engine for versions less than 25.0.3-18. A patched version of the package is available...

CVE-2026-39821 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-39821 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-39821 affecting package moby-engine for versions less than 25.0.3-18

CVE-2026-39821 affecting package moby-engine for versions less than 25.0.3-18. A patched version of the package is available...

CVE-2026-39835 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-39835 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-39821 affecting package etcd for versions less than 3.5.30-2

CVE-2026-39821 affecting package etcd for versions less than 3.5.30-2. A patched version of the package is available...

WordPress Support Board plugin < 3.8.9 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Phat RiO in WordPress Plugin Support Board versions 3.8.9...

CVE-2026-40546

SOPlanning is vulnerable to SQL Injection across multiple endpoints and parameters. Attacker with low privileges can inject arbitrary SQL commands, potentially gaining full control over the database. This issue affects SOPlanning version 1.55 and below...

EUVD-2026-33614

SOPlanning does not verify uploaded file extension. An authenticated attacker with access to the backup functionality can upload a crafted ZIP archive containing a legitimate user.csv file alongside a malicious file, which is extracted on the server. When combined with CVE-2026-40547 Path...

CVE-2026-40547

SOPlanning is vulnerable to Path Traversal in backup endpoints. Authenticated remote attacker is able to exploit a vulnerable endpoint and construct payloads that allow reading and executing files previously added through the backup functionality. Critically, due to CVE-2026-40543 Missing...

CVE-2026-40545 Reflected XSS in SOPlanning

SOPlanning is vulnerable to Reflected XSS via the taches parameter. An attacker can craft a malicious URL which, when opened by authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue affects SOPlanning version 1.55 and below...