CVE-2026-66786

A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition CRD without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This...

CVE-2026-64968

creationtimestamp| type| source ---|---|--- 2026-08-20 16:45:19+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-64960...

CVE-2026-64962

creationtimestamp| type| source ---|---|--- 2026-08-20 16:45:05+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-64960...

CVE-2026-75948

creationtimestamp| type| source ---|---|--- 2026-08-20 12:15:10+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-75948...

GO-2026-6107 vulnerabilities

Vulnerabilities for packages: dapr, external-dns, hubble, cilium-cli, minio, milvus, loki, cert-manager, rancher-support-bundle-kit, kine, reports-server, kots, multicluster-controlplane-fips, multicluster-controlplane, cilium, kyverno...

GO-2026-6107 vulnerabilities

Vulnerabilities for packages: kots, dapr, kyverno, cert-manager, kine, cilium, minio, external-dns, hubble, loki, cilium-cli...

GHSA-6VCH-Q96H-7GC3 vulnerabilities

Vulnerabilities for packages: kots, dapr, kyverno, cert-manager, kine, cilium, minio, external-dns, hubble, loki, cilium-cli...

CVE-2026-73500 vulnerabilities

Vulnerabilities for packages: kots, dapr, kyverno, cert-manager, kine, cilium, minio, external-dns, hubble, loki, cilium-cli...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kots, cloud-provider-azure, datadog-operator, spicedb, metallb, cass-operator, spqr, emissary, kubescape, argocd-image-updater, cluster-api, datadog-agent, rke2-cloud-provider, metrics-server, cluster-api-aws-controller, k8ssandra-client, cilium, helm-operator,...

CVE-2026-73500 affecting package cert-manager for versions less than 1.12.15-12

CVE-2026-73500 affecting package cert-manager for versions less than 1.12.15-12. A patched version of the package is available...

CVE-2026-71138

creationtimestamp| type| source ---|---|--- 2026-08-19 18:17:04+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-65609

creationtimestamp| type| source ---|---|--- 2026-08-19 16:15:03+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-65609...

CVE-2026-58083

creationtimestamp| type| source ---|---|--- 2026-08-19 12:15:11+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-58083...

CVE-2026-58084

creationtimestamp| type| source ---|---|--- 2026-08-19 12:15:08+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-58084...

CVE-2026-58085

creationtimestamp| type| source ---|---|--- 2026-08-19 12:15:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-58085...

CVE-2026-58082

creationtimestamp| type| source ---|---|--- 2026-08-19 12:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-58082...

DEBIAN-CVE-2026-74957

Mitigation bypass in the Safe Browsing component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

CVE-2026-73488

creationtimestamp| type| source ---|---|--- 2026-08-17 16:45:25+00:00| seen| https://www.acn.gov.it/portale/w/flowise-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...

CVE-2026-73604

creationtimestamp| type| source ---|---|--- 2026-08-17 16:45:23+00:00| seen| https://www.acn.gov.it/portale/w/flowise-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...

CVE-2026-40126

creationtimestamp| type| source ---|---|--- 2026-08-17 12:15:03+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-40126 2026-08-17 13:36:59+00:00| seen| https://bsky.app/profile/threadlinqs.bsky.social/post/3mtbt3uh33k2t 2026-08-18 11:39:38+00:00| seen|...