SUSE CVE-2026-25518

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to before 1.19.3, the cert-manager-controller performs DNS...

CVE-2026-27072

creationtimestamp| type| source ---|---|--- 2026-03-02 12:33:36+00:00| seen| https://www.cert.si/si-cert-2026-02/...

CVE-2026-1841

creationtimestamp| type| source ---|---|--- 2026-03-02 12:33:36+00:00| seen| https://www.cert.si/si-cert-2026-02/...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, kine, tflint, fluent-operator, istio, terraform-provider-grafana, ceph-csi-operator, seaweedfs, cass-operator-fips-no-pvc-delete, teleport, falcoctl-fips, k8s-agents-operator-fips, cloud-provider-aws-fips, docker-cli-buildx-fips,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: gitaly, gomplate, crossplane-provider-azure-managedidentity, crossplane-provider-aws-cloudwatchlogs, flux-notification-controller, crossplane-provider-aws-ec2, terraform-provider-azurerm, openbao, flux-image-automation-controller, pulumi-kubernetes-operator, extism,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: gitaly, gomplate, crossplane-provider-azure-managedidentity, crossplane-provider-aws-cloudwatchlogs, flux-notification-controller, crossplane-provider-aws-ec2, terraform-provider-azurerm, openbao, flux-image-automation-controller, pulumi-kubernetes-operator, extism,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: terragrunt-fips, crossplane-provider-azure-sql, omnictl-multiarch, flux-source-controller-fips, q, crossplane-provider-aws-cognitoidentity, gitness, docker, flux-helm-controller-fips, crossplane-provider-aws-elasticache-fips,...

UBUNTU-CVE-2026-27586

Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, two swallowed errors in ClientAuthentication.provision cause mTLS client certificate authentication to silently fail open when a CA certificate file is missing, unreadable, or malformed. The server starts...

CVE-2026-2997

creationtimestamp| type| source ---|---|--- 2026-02-23 01:49:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10721-276b6-2.html...

GO-2026-4399 DoS in cert-manager-controller via Specially Crafted DNS Response in github.com/cert-manager/cert-manager

DoS in cert-manager-controller via Specially Crafted DNS Response in github.com/cert-manager/cert-manager...

CVE-2026-2457

creationtimestamp| type| source ---|---|--- 2026-02-16 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0173/...

CVE-2026-2462

creationtimestamp| type| source ---|---|--- 2026-02-16 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0173/...

CVE-2026-2458

creationtimestamp| type| source ---|---|--- 2026-02-16 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0173/...

CVE-2026-26246

creationtimestamp| type| source ---|---|--- 2026-02-16 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0173/...

Poland Energy Sector Cyber Incident Highlights OT and ICS Security Gaps

The purpose of this Alert is to amplify Poland’s Computer Emergency Response Team CERT Polska’s Energy Sector Incident Report published on Jan. 30, 2026, and highlight key mitigations for Energy Sector stakeholders. In December 2025, a malicious cyber actors targeted and compromised operational...

BIT-CERT-MANAGER-2026-25518 cert-manager-controller DoS via Specially Crafted DNS Response

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to before 1.19.3, the cert-manager-controller performs DNS...

Siemens NX

SUMMARY Siemens NX is affected by multiple file parsing vulnerabilities that could be triggered when the application reads files in CGM format. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to...

CVE-2026-2098

creationtimestamp| type| source ---|---|--- 2026-02-06 12:06:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10700-3534d-2.html...

AZL-76874 CVE-2025-58190 affecting package cert-manager 1.12.15-4

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76868 CVE-2025-47911 affecting package cert-manager 1.12.15-4

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...