CVE-2026-94448 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchevents-fips, crossplane-provider-aws-backup, goldilocks-fips, crossplane-provider-aws-athena-fips, crossplane-provider-aws-imagebuilder-fips, terraform-provider-azuread-fips, vault-secrets-webhook-fips, opencost-fips,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchevents-fips, crossplane-provider-aws-backup, clickhouse-backup, fortio-fips, kube-rbac-proxy-fips, kubernetes-csi-external-attacher-fips, chartmuseum, virt-handler, kubernetes-dashboard-auth-fips, aws-flb-kinesis-fips,...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchevents-fips, crossplane-provider-aws-backup, clickhouse-backup, fortio-fips, kube-rbac-proxy-fips, kubernetes-csi-external-attacher-fips, chartmuseum, virt-handler, extension-host-fips, kubernetes-dashboard-auth-fips,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchevents-fips, crossplane-provider-aws-backup, clickhouse-backup, fortio-fips, kube-rbac-proxy-fips, kubernetes-csi-external-attacher-fips, chartmuseum, virt-handler, extension-host-fips, kubernetes-dashboard-auth-fips,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchevents-fips, crossplane-provider-aws-backup, clickhouse-backup, fortio-fips, kube-rbac-proxy-fips, kubernetes-csi-external-attacher-fips, chartmuseum, virt-handler, extension-host-fips, kubernetes-dashboard-auth-fips,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchevents-fips, crossplane-provider-aws-backup, clickhouse-backup, fortio-fips, kube-rbac-proxy-fips, kubernetes-csi-external-attacher-fips, chartmuseum, virt-handler, extension-host-fips, kubernetes-dashboard-auth-fips,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchevents-fips, crossplane-provider-aws-backup, clickhouse-backup, fortio-fips, kube-rbac-proxy-fips, kubernetes-csi-external-attacher-fips, chartmuseum, virt-handler, extension-host-fips, kubernetes-dashboard-auth-fips,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchevents-fips, crossplane-provider-aws-backup, clickhouse-backup, fortio-fips, kube-rbac-proxy-fips, kubernetes-csi-external-attacher-fips, chartmuseum, virt-handler, extension-host-fips, kubernetes-dashboard-auth-fips,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchevents-fips, crossplane-provider-aws-backup, clickhouse-backup, fortio-fips, kube-rbac-proxy-fips, kubernetes-csi-external-attacher-fips, chartmuseum, virt-handler, extension-host-fips, kubernetes-dashboard-auth-fips,...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kargo, kube-arangodb, maru, cluster-api-helm-controller, tigera-operator, xeol, flux-helm-controller, cert-manager-cmctl, helm-set-status, manifest-tool, k9s, rancher-helm, k8sgpt, gitness, helm-mapkubeapis, opentofu, helm-push...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kargo, kube-arangodb, maru, cluster-api-helm-controller, tigera-operator, xeol, flux-helm-controller, cert-manager-cmctl, helm-set-status, manifest-tool, k9s, rancher-helm, k8sgpt, gitness, helm-mapkubeapis, opentofu, helm-push...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: chartmuseum, newrelic-infrastructure-agent, buildkitd, cluster-api-helm-controller, helm-operator, kaniko, neuvector-scanner, docker-compose, docker, rancher, helm-mapkubeapis, skaffold, steampipe, zot, spegel, dagger, kubescape-operator, headlamp, wolfictl,...

CVE-2026-84445 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchevents-fips, crossplane-provider-aws-backup, clickhouse-backup, kube-rbac-proxy-fips, chartmuseum, virt-handler, external-dns-fips, google-osconfig-agent, rancher-system-agent, crossplane-provider-aws-datapipeline,...

GHSA-2V4P-QF9Q-27WJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchevents-fips, crossplane-provider-aws-backup, clickhouse-backup, kube-rbac-proxy-fips, chartmuseum, virt-handler, external-dns-fips, google-osconfig-agent, rancher-system-agent, crossplane-provider-aws-datapipeline,...

SUSE CVE-2026-7184

Mattermost versions 11.6.x = 11.6.1, 11.5.x = 11.5.4, 10.11.x = 10.11.15 fail to sanitize the Remote Cluster API response on PATCH operations, which allows authenticated users with the managesecureconnections permission to obtain remote cluster authentication tokens via a PATCH request to the...

GO-2026-6282 Mattermost doesn't sanitize the Remote Cluster API response on PATCH operations in github.com/mattermost/mattermost-server

Mattermost doesn't sanitize the Remote Cluster API response on PATCH operations in github.com/mattermost/mattermost-server...

PT-2026-82031

Mattermost doesn't sanitize the Remote Cluster API response on PATCH operations in github.com/mattermost/mattermost-server...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: metallb, cert-manager, spqr, cass-operator, descheduler, cluster-api-helm-controller, helm-operator, kubernetes-csi-external-health-monitor, kwok, kubernetes, openbao, caddy, metrics-server, rancher, kuma, tetragon, cloud-provider-azure, zot, rke2-cloud-provider,...

CVE-2026-48162

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta3, DistributedAPI.sendtmpfile in framework/wazuh/core/cluster/dapi/dapi.py joins an attacker-controlled tmpfile value to WAZUHPATH without canonicalization or...

CVE-2026-48162

CVE-2026-48162 affects Wazuh (open-source threat detection platform) versions 4.0.0 through 4.14.6 and 5.0.0-beta3 . The vulnerability resides in DistributedAPI.send_tmp_file() in framework/wazuh/core/cluster/dapi/dapi.py, where an attacker-controlled tmp_file value is joined to WAZUH_PATH withou...