CVE-2026-20015

creationtimestamp| type| source ---|---|--- 2026-03-05 11:03:43+00:00| seen| https://www.cert.at/de/warnungen/2026/3/kritische-sicherheitslucken-in-cisco-secure-firewall-produkten-updates-verfugbar 2026-03-05 14:15:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyc5zbe22b...

CLEANSTART-2026-SM37781 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the cert-manager-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...

SUSE CVE-2026-25518

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to before 1.19.3, the cert-manager-controller performs DNS...

CVE-2026-1841

creationtimestamp| type| source ---|---|--- 2026-03-02 12:33:36+00:00| seen| https://www.cert.si/si-cert-2026-02/...

CVE-2026-27072

creationtimestamp| type| source ---|---|--- 2026-03-02 12:33:36+00:00| seen| https://www.cert.si/si-cert-2026-02/...

CVE-2025-47378: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: rke2-runtime, gitaly-fips, velero-plugin-for-gcp, opencost-fips, consul, trillian-fips, metrics-server, kube-arangodb-fips, falcoctl-fips, backup-restore-operator-fips, buildkitd, restic, k3d, kubevirt-cdi-operator, kaniko, fulcio-fips, cluster-api-fips,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: zot, argocd-image-updater, flux-notification-controller, trivy, trufflehog, crossplane-provider-azure-authorization, crossplane-provider-aws-firehose, helm-push, ratify, sops, grype, src-fingerprint, crossplane-provider-aws-sqs, melange, crossplane-provider-aws-ec2,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: zot, argocd-image-updater, flux-notification-controller, trivy, trufflehog, crossplane-provider-azure-authorization, crossplane-provider-aws-firehose, helm-push, ratify, sops, grype, src-fingerprint, crossplane-provider-aws-sqs, melange, crossplane-provider-aws-ec2,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: terraform-fips, crossplane-provider-aws-eks-fips, omni, gitlab-operator, pulumi, gomplate-fips, external-secrets-operator-fips, ratify, ratify-fips, gitlab-rails-ce, argo-rollouts-fips, scorecard, atlantis, gitaly-fips, syft-fips, terraform-provider-databricks,...

UBUNTU-CVE-2026-27586

Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, two swallowed errors in ClientAuthentication.provision cause mTLS client certificate authentication to silently fail open when a CA certificate file is missing, unreadable, or malformed. The server starts...

CVE-2026-2997

creationtimestamp| type| source ---|---|--- 2026-02-23 01:49:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10721-276b6-2.html...

GO-2026-4399 DoS in cert-manager-controller via Specially Crafted DNS Response in github.com/cert-manager/cert-manager

DoS in cert-manager-controller via Specially Crafted DNS Response in github.com/cert-manager/cert-manager...

CVE-2026-2457

creationtimestamp| type| source ---|---|--- 2026-02-16 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0173/...

CVE-2026-26246

creationtimestamp| type| source ---|---|--- 2026-02-16 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0173/...

CVE-2026-2462

creationtimestamp| type| source ---|---|--- 2026-02-16 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0173/...

CVE-2026-2458

creationtimestamp| type| source ---|---|--- 2026-02-16 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0173/...

Poland Energy Sector Cyber Incident Highlights OT and ICS Security Gaps

The purpose of this Alert is to amplify Poland’s Computer Emergency Response Team CERT Polska’s Energy Sector Incident Report published on Jan. 30, 2026, and highlight key mitigations for Energy Sector stakeholders. In December 2025, a malicious cyber actors targeted and compromised operational...

BIT-CERT-MANAGER-2026-25518 cert-manager-controller DoS via Specially Crafted DNS Response

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to before 1.19.3, the cert-manager-controller performs DNS...

Siemens NX

SUMMARY Siemens NX is affected by multiple file parsing vulnerabilities that could be triggered when the application reads files in CGM format. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to...