ROS-20260605-73-0021

The vulnerability in Portainer-Ce is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260605-73-0023

The vulnerability in Portainer-Ce is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

crate-anon (0.20.8), mayan-edms (4.10.4) +4 more potentially affected by CVE-2026-8404 via django (4.2.28)

django PYPI version 4.2.28 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - crate-anon 0.20.8 - mayan-edms 4.10.4 - nemo =7.3.5, =7.3.9, =4.0.6, =21.11.3, =21.12.0 Source cves: CVE-2026-8404 Source advisory:...

django-microservice-common (>=0.1.0, <=0.1.7), djangodjangodjango (4.0.7) +3 more potentially affected by CVE-2026-6873 via django (4.0.7)

django PYPI version 4.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-microservice-common =0.1.0, =11.4.0, =0.1.0, =0.1.3 - tesla-ce 1.0.0 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

crate-anon (0.20.8), mayan-edms (4.10.4) +4 more potentially affected by CVE-2026-48587 via django (4.2.28)

django PYPI version 4.2.28 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - crate-anon 0.20.8 - mayan-edms 4.10.4 - nemo =7.3.5, =7.3.9, =4.0.6, =21.11.3, =21.12.0 Source cves: CVE-2026-48587 Source advisory:...

geonode (4.4.5), mayan-edms (>=4.6.13, <=4.7.9) +4 more potentially affected by CVE-2026-6873 via django (4.2.29)

django PYPI version 4.2.29 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - geonode 4.4.5 - mayan-edms =4.6.13, =7.4.0, =7.4.0, =4.0.17, =4.0.18 - pheme 21.12.1 Source cves: CVE-2026-6873 Source advisory:...

djangodjangodjango (4.2.26), mayan-edms (>=4.7.7, <=4.8.9) +3 more potentially affected by CVE-2026-8404 via django (4.2.26)

django PYPI version 4.2.26 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.2.26 - mayan-edms =4.7.7, =7.2.29, =7.2.33 - pheme 21.11.1 Source cves: CVE-2026-8404 Source advisory: OSV:GHSA-8CJM-8MP7-R2XF...

geonode (4.4.5), mayan-edms (>=4.6.13, <=4.7.9) +4 more potentially affected by CVE-2026-8404 via django (4.2.29)

django PYPI version 4.2.29 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - geonode 4.4.5 - mayan-edms =4.6.13, =7.4.0, =7.4.0, =4.0.17, =4.0.18 - pheme 21.12.1 Source cves: CVE-2026-8404 Source advisory:...

ROS-20260529-73-0009

The vulnerability in Portainer-Ce is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Linux Distros Unpatched Vulnerability : CVE-2026-1402

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain...

CVE-2026-33590 Insecure default permissions in Portainer CE

Insecure default settings of Portainer CE grant regular non-admin users privileges that allow host filesystem access and host-level code execution. An authenticated non-administrative user with endpoint access can exploit these settings to read host files or obtain root equivalent access on the...

EUVD-2026-33007

Insecure default settings of Portainer CE grant regular non-admin users privileges that allow host filesystem access and host-level code execution. An authenticated non-administrative user with endpoint access can exploit these settings to read host files or obtain root equivalent access on the...

CVE-2026-9807 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have allowed a blocked Project Access Token to continue accessing private resources due to incorrect authorization...

CVE-2026-33590: Incorrect Default Permissions

Insecure default settings of Portainer CE grant regular non-admin users privileges that allow host filesystem access and host-level code execution. An authenticated non-administrative user with endpoint access can exploit these settings to read host files or obtain root equivalent access on the...

CVE-2026-1402

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have allowed an authenticated user to cause denial of service due to insufficient validation...

CVE-2026-1402

GitLab CVE-2026-1402 affects GitLab CE/EE, before versions 18.10.7 (17.1–pre 18.10.7), 18.11 before 18.11.4, and 19.0 before 19.0.1. The issue allowed an authenticated user to trigger a denial of service due to insufficient validation. The vulnerability has been remediated in the provided patch r...

CVE-2026-6713 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have allowed an unauthorized user to enumerate private projects due to incorrect authorization checks...

CVE-2026-8716 Use of Incorrectly-Resolved Name or Reference in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.7 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have allowed an authenticated user to access CI data from a different ref type than intended...

CVE-2026-1402: Allocation of Resources Without Limits or Throttling

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have allowed an authenticated user to cause denial of service due to insufficient validation...

Linux Distros Unpatched Vulnerability : CVE-2025-12669

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have...