EUVD-2026-79720

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Easily exploitable vulnerability allows low privileged attacker with network access via HTT...

EUVD-2026-79718

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Easily exploitable vulnerability allows unauthenticated attacker with access to the physica...

CVE-2026-83417

A vulnerability in the Oracle Communications Cloud Native Core – Security Edge Protection Proxy (SEPP) component, affecting versions 26.1.200 and 25.2.201 , allows an unauthenticated attacker with access to the adjacent physical communication segment to compromise the SEPP. Successful exploitatio...

CVE-2026-83417: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Easily exploitable vulnerability allows unauthenticated attacker with access to the physica...

PT-2026-92889

Name of the Vulnerable Software and Affected Versions Oracle Communications Cloud Native Core Security Edge Protection Proxy version 26.1.200 Oracle Communications Cloud Native Core Security Edge Protection Proxy version 25.2.201 Description A flaw in the SEPP component allows a low privileged...

CVE-2026-83419: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Easily exploitable vulnerability allows low privileged attacker with network access via HTT...

CVE-2026-83418: Improper Access Control

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Difficult to exploit vulnerability allows low privileged attacker with network access via...

Krawl v2.4.0

Krawl A modern, customizable web honeypot server designed to detect and track malicious activity from attackers and web crawlers through deceptive web pages, fake credentials, and canary tokens. Table of Contents Demo What is Krawl? Krawl Dashboard Deployment Modes Krawl Banlist Quickstart Docker...

CVE-2026-54523

A flaw was found in Kyverno, a policy engine for cloud-native platforms. A user with specific permissions to create policy objects in one area namespace can exploit a vulnerability where a namespace argument is not properly checked. This allows them to force the system's admission controller, whi...

KubeArmor v1.7.5-rc2

KubeArmor is a cloud-native runtime security enforcement system that restricts the behavior such as process execution, file access, and networking operations of pods, containers, and nodes VMs at the system level. KubeArmor leverag...

[SECURITY] Fedora 44 Update: pack-0.40.9-1.fc44

pack is a CLI implementation of the Platform Interface Specification for Cloud Native Buildpacks...

[SECURITY] Fedora 43 Update: pack-0.40.9-1.fc43

pack is a CLI implementation of the Platform Interface Specification for Cloud Native Buildpacks...

GO-2026-6112 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-sql, crossplane-provider-aws-kms, hugo, terraform-provider-grafana, crossplane-provider-aws-rds, crossplane-provider-aws-sns, hugo-extended, crossplane-provider-aws-cloudfront, nuclei, dataplaneapi, kubevela, crossplane-provider-aws-sqs,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: kots, ferretdb, grpc-health-probe-fips, prometheus, falcosidekick, k8sgpt-operator, dbmate, sops, falcosidekick-fips, certificate-transparency-fips, terraform-docs, kargo, cloudnative-pg, kwok, vcluster, step-fips, step-ca, fulcio, kube-rbac-proxy, gomplate, melange,...

GO-2025-4257 vulnerabilities

Vulnerabilities for packages: k8sgpt, kserve...

TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign

A new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the cybercrime scene as far back as 2020, indicating the group has been compromising internet-facing infrastructure for years before training their sights on the software supply chain. "The connection is...

[SECURITY] Fedora 43 Update: pack-0.40.8-1.fc43

pack is a CLI implementation of the Platform Interface Specification for Cloud Native Buildpacks...

[SECURITY] Fedora 44 Update: pack-0.40.8-1.fc44

pack is a CLI implementation of the Platform Interface Specification for Cloud Native Buildpacks...

EUVD-2026-39819

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, destructor of JSON Object results in stack overflow when deeply O100K nested objects are present. This vulnerability is fixed in 1.35.11, 1.36.7, 1.37.3, and 1.38.1...

PT-2026-52890

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.35.11 Envoy versions prior to 1.36.7 Envoy versions prior to 1.37.3 Envoy versions prior to 1.38.1 Description An issue exists in the UDP DNS filter when configured with local or remote resolution for names exactly 25...