CVE-2026-21916

A UNIX Symbolic Link Symlink Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate their privileges to root which will lead to a complete compromise of the system. When after a user has performed a specific 'file lin...

CVE-2026-21915

A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows a local, high privileged attacker to escalate their privileges to root. The CLI menu accepts input without carefully validating it, which allows for shell...

Security Bulletin: IBM Planning Analytics Cartridge has addressed a security vulnerability in Docker CLI (CVE-2025-15558)

Summary IBM Planning Analytics Cartridge is considered affected by a vulnerability in Docker CLI Vulnerability Details CVEID:CVE-2025-15558 DESCRIPTION: Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A...

OPENSUSE-SU-2026:10539-1 oci-cli-3.76.2-1.1 on GA media

These are all security issues fixed in the oci-cli-3.76.2-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, helm-docs, kubescape-server, pluto-fips, cloudbeat, cert-manager-cmctl-fips, chartmuseum-fips, rancher-fleet-fips, tigera-operator, linkerd2, rancher-fleet, trivy-operator, nova-fips, harbor-fips, kube-arangodb, teleport, zarf-fips, cerbos, k9s-fips,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: coredns, prometheus-operator, k8s-device-plugin, kaf, karpenter, flux, fscrypt, kyverno, spire-server, fuse-overlayfs-snapshotter, cilium, prometheus, hubble, gitlab-kas, kubernetes, chezmoi, gitlab-pages, istio, nerdctl, zot, kubescape, kots, aws-flb-firehose, kine,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: coredns, kube-logging-operator-custom-runner, trivy-operator, argo-workflows, pdfcpu, omnibump, cri-tools, nats, clickhouse-operator, http-echo, secrets-store-csi-driver-provider-azure, metrics-agent, go-licenses, gh, kubernetes-dashboard-metrics-scraper, flannel,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: coredns, rancher-agent, trivy-operator, kubernetes-dashboard-auth, argo-workflows, kyverno-notation-aws, kyverno, flux-helm-controller, grpcurl, terraform-provider-kubernetes, gatus, cri-tools, kyverno-policy-reporter-ui, rancher,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: jaeger-fips, chartmuseum-fips, flux-helm-controller, cloud-provider-aws, crossplane-fips, gh, docker-compose-fips, spegel, opa-fips-envoy, regclient, argo-workflows, azuredisk-csi-fips, kube-fluentd-operator, kind, splunk-otel-collector-fips, buildah-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: jaeger-fips, chartmuseum-fips, flux-helm-controller, cloud-provider-aws, crossplane-fips, gh, docker-compose-fips, spegel, opa-fips-envoy, regclient, argo-workflows, azuredisk-csi-fips, kube-fluentd-operator, kind, splunk-otel-collector-fips, buildah-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: jaeger-fips, jupyterhub-k8s-image-awaiter-fips, crossplane-provider-aws-wafv2-fips, prometheus-nats-exporter-fips, chartmuseum-fips, flux-helm-controller, nri-f5-fips, supercronic-fips, nri-consul, cadvisor-fips, crossplane-provider-aws-acm, mig-parted, cue-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: jaeger-fips, jupyterhub-k8s-image-awaiter-fips, crossplane-provider-aws-wafv2-fips, prometheus-nats-exporter-fips, chartmuseum-fips, flux-helm-controller, nri-f5-fips, supercronic-fips, nri-consul, cadvisor-fips, crossplane-provider-aws-acm, mig-parted, cue-fips,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: jaeger-fips, jupyterhub-k8s-image-awaiter-fips, crossplane-provider-aws-wafv2-fips, prometheus-nats-exporter-fips, chartmuseum-fips, flux-helm-controller, nri-f5-fips, supercronic-fips, nri-consul, cadvisor-fips, crossplane-provider-aws-acm, mig-parted, cue-fips,...

CVE-2026-5059 aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability

aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...

tekton-cli-0.44.1-1.1 on GA media (moderate)

tekton-cli-0.44.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10529-1 Rating: moderate Cross-References: CVE-2026-33211 CVE-2026-34986 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed in the...

GHSA-68QG-G8MG-6PR7 paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass

Summary An unauthenticated attacker can achieve full remote code execution on any network-accessible Paperclip instance running in authenticated mode with default configuration. No user interaction, no credentials, just the target's address. The entire chain is six API calls. I verified every ste...

docvec-cli (0.1.0), ingenious (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-40260 via pypdf (5.5.0)

pypdf PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docvec-cli 0.1.0 - ingenious =0.1.0, =0.1.3b1, =0.2.6, =29.1.3, =30.0.4 Source cves: CVE-2026-40260 Source advisory: OSV:GHSA-3CRG-W4F6-42MX...

@saltcorn/admin-models (>=1.6.0-alpha.0, <=1.6.0-beta.3), @saltcorn/base-plugin (>=1.6.0-alpha.0, <=1.6.0-beta.3) +5 more potentially affected by unknown CVE via @saltcorn/data (>=1.6.0-alpha.0, <=1.6.0-beta.3)

@saltcorn/data NPM version =1.6.0-alpha.0, =1.6.0-alpha.0, =1.6.0-alpha.0, =1.6.0-alpha.0, =1.6.0-alpha.0, =1.6.0-alpha.0, =1.6.0-alpha.0, =1.6.0-alpha.0, =1.6.0-beta.3 Source cves: unknown CVE Source advisory: GHSA-59XV-588H-2VMM...

@saltcorn/admin-models (>=1.6.0-alpha.0, <=1.6.0-beta.3), @saltcorn/base-plugin (>=1.6.0-alpha.0, <=1.6.0-beta.3) +5 more potentially affected by unknown CVE via @saltcorn/data (>=1.6.0-alpha.0, <=1.6.0-beta.3)

@saltcorn/data NPM version =1.6.0-alpha.0, =1.6.0-alpha.0, =1.6.0-alpha.0, =1.6.0-alpha.0, =1.6.0-alpha.0, =1.6.0-alpha.0, =1.6.0-alpha.0, =1.6.0-alpha.0, =1.6.0-beta.3 Source cves: unknown CVE Source advisory: OSV:GHSA-59XV-588H-2VMM...

@saltcorn/cli (>=1.6.0-alpha.0, <=1.6.0-alpha.17), @saltcorn/mobile-builder (>=1.6.0-alpha.0, <=1.6.0-alpha.17) potentially affected by unknown CVE via @saltcorn/server (>=1.6.0-alpha.0, <=1.6.0-alpha.17)

@saltcorn/server NPM version =1.6.0-alpha.0, =1.6.0-alpha.0, =1.6.0-alpha.0, =1.6.0-alpha.17 Source cves: unknown CVE Source advisory: SNYK:JS-SALTCORNSERVER-15991556...