CVE-2026-67231: Improper Certificate Validation

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

PT-2026-105761

This update for openSUSE-signkey-cert fixes the following issues: Adds the UEFI signing key of Leap 16.0. This needs to be imported via the MOK dialog on boot...

CERTFR-2026-ACT-040

creationtimestamp| type| source ---|---|--- 2026-09-21 14:17:52+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mvzvp7hn2r2x 2026-09-21 14:18:02+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/117309457770446816 2026-09-22 06:00:50+00:00| seen|...

EulerOS Virtualization 2.10.1 : python-requests (EulerOS-SA-2026-3850)

According to the versions of the python-requests packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made...

EulerOS Virtualization 2.10.0 : python-requests (EulerOS-SA-2026-3884)

According to the versions of the python-requests packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made...

CVE-2026-34492

creationtimestamp| type| source ---|---|--- 2026-09-19 12:00:05+00:00| seen| https://t.me/icscert/1436 2026-09-20 00:00:10+00:00| seen| https://t.me/icscert/1436...

CVE-2026-64887

creationtimestamp| type| source ---|---|--- 2026-09-19 12:00:05+00:00| seen| https://t.me/icscert/1436 2026-09-20 00:00:07+00:00| seen| https://t.me/icscert/1436...

CVE-2026-57263

creationtimestamp| type| source ---|---|--- 2026-09-18 20:00:04+00:00| seen| https://t.me/icscert/1432 2026-09-19 00:00:11+00:00| seen| https://t.me/icscert/1432...

CVE-2026-78662 affecting package cert-manager for versions less than 1.12.15-14

CVE-2026-78662 affecting package cert-manager for versions less than 1.12.15-14. A patched version of the package is available...

CVE-2026-84445 affecting package cert-manager for versions less than 1.12.15-14

CVE-2026-84445 affecting package cert-manager for versions less than 1.12.15-14. An upgraded version of the package is available that resolves this issue...

CVE-2026-56855 affecting package cert-manager for versions less than 1.12.15-14

CVE-2026-56855 affecting package cert-manager for versions less than 1.12.15-14. A patched version of the package is available...

CVE-2026-81869 affecting package cert-manager for versions less than 1.12.15-14

CVE-2026-81869 affecting package cert-manager for versions less than 1.12.15-14. An upgraded version of the package is available that resolves this issue...

CVE-2026-83530 affecting package cert-manager for versions less than 1.12.15-14

CVE-2026-83530 affecting package cert-manager for versions less than 1.12.15-14. An upgraded version of the package is available that resolves this issue...

CVE-2026-37236 affecting package cert-manager for versions less than 1.12.15-14

CVE-2026-37236 affecting package cert-manager for versions less than 1.12.15-14. A patched version of the package is available...

CLEANSTART-2026-OF01122 Security fix for ghsa-vugc-356p-c3xw applied in: cert-manager-webhook-pdns-fips 3.0.0-r0, cert-manager-webhook-pdns-fips 3.1.3-r0, cert-manager-webhook-pdns-fips 3.2.3-r0

ghsa-vugc-356p-c3xw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HR84261 Security fix for ghsa-hcp3-c754-cr77 applied in: cert-manager-webhook-pdns-fips 3.0.0-r0, cert-manager-webhook-pdns-fips 3.1.3-r0, cert-manager-webhook-pdns-fips 3.2.3-r0

ghsa-hcp3-c754-cr77 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YV64098 Security fix for ghsa-cxp5-9wg8-vx66 applied in: cert-manager-webhook-pdns-fips 3.0.0-r0, cert-manager-webhook-pdns-fips 3.1.3-r0, cert-manager-webhook-pdns-fips 3.2.3-r0

ghsa-cxp5-9wg8-vx66 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KE09757 Security fix for ghsa-6vp2-p543-phr9 applied in: cert-manager-webhook-pdns-fips 3.0.0-r0, cert-manager-webhook-pdns-fips 3.1.3-r0, cert-manager-webhook-pdns-fips 3.2.3-r0

ghsa-6vp2-p543-phr9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LO55255 Security fix for CVE-2023-45142 applied in: cert-manager-webhook-pdns-fips 2.3.0-r0, druid-exporter-fips 0.11-r0, kubernetes 1.33.13-r0

CVE-2023-45142 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZE96570 Security fix for ghsa-9h84-qmv7-982p applied in: cert-manager-cmctl 2.3.0-r0, cert-manager-cmctl-fips 2.1.1-r0, cert-manager-cmctl-fips 2.3.0-r0, chartmuseum-fips 0.14.0-r1, chartmuseum-fips 0.15.0-r4, harbor 2.13.4-r2, harbor 2.14.2-r1, harbor-fips 2.10.3-r0, harbor-fips 2.12.4-r1, harbor-fips 2.13.2-r1, k8sgpt 0.4.26-r0, kubevela 1.10.8-r0

ghsa-9h84-qmv7-982p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...