AZL-100914 CVE-2026-83530 affecting package cert-manager for versions less than 1.12.15-14

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced...

CVE-2026-86853

creationtimestamp| type| source ---|---|--- 2026-09-08 20:15:23+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86853 2026-09-09 13:50:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mv3okv6hgh2l...

CVE-2026-86736

creationtimestamp| type| source ---|---|--- 2026-09-08 20:15:16+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86736...

CVE-2026-86737

creationtimestamp| type| source ---|---|--- 2026-09-08 20:15:11+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86737...

CVE-2026-86731

creationtimestamp| type| source ---|---|--- 2026-09-08 20:15:04+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86731...

CVE-2026-86734

creationtimestamp| type| source ---|---|--- 2026-09-08 20:15:02+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86734...

CVE-2026-86733

creationtimestamp| type| source ---|---|--- 2026-09-08 17:46:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2klradhbvva6i 2026-09-08 20:15:09+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86733 2026-09-11 05:00:06+00:00| seen|...

CVE-2026-86732

creationtimestamp| type| source ---|---|--- 2026-09-08 17:01:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muzirvtrwu2o 2026-09-08 17:52:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/a3rrx67pj2usq 2026-09-08 20:15:07+00:00| seen|...

CLEANSTART-2026-TF85238 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the cert-manager package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CERTFR-2026-ACT-038

creationtimestamp| type| source ---|---|--- 2026-09-07 13:16:34+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3muwlqpl73d2v 2026-09-07 13:16:41+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/117229944394912620...

CVE-2026-86267

creationtimestamp| type| source ---|---|--- 2026-09-07 08:15:12+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86267...

CVE-2026-86265

creationtimestamp| type| source ---|---|--- 2026-09-07 08:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86265...

CVE-2026-86268

creationtimestamp| type| source ---|---|--- 2026-09-07 05:47:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2zui7f45fntkc 2026-09-07 08:15:10+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86268...

CVE-2026-86269

creationtimestamp| type| source ---|---|--- 2026-09-07 05:41:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2ry6clra3wtkl 2026-09-07 08:15:07+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86269...

CVE-2026-82208 wolfSSL CA-cache hit overrides callback

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

EUVD-2026-72168

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

OPENSUSE-SU-2026:21776-1 Security update for NetworkManager

This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend bsc1267696. - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Enterprise server certificate validation...

CGA-V88X-7PMW-QG5P

Bulletin has no description...

SimpleWebAuthn: Registration verification does not sufficiently ensure that attestation certificates chain to a trust anchor

Summary validateCertificatePath does not verify that an attestation's certificate chain actually terminates at a configured trust anchor. When walking the chain it stops at the first self-signed certificate it finds which could be user-supplied, and exits early. This happens before the configured...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the OCSP processing functionality, which accepts an OCSP response without checking that its CertID matches the certificate being validated and treats definitive verification failures as transient. An...