org.apache.camel.karaf:camel-jgroups (>=4.7.0, <=4.18.4), org.apache.camel.quarkus:camel-quarkus-integration-test-jgroups (>=3.0.0-m1, <=3.13.0) +4 more potentially affected by CVE-2026-88900 via org.apache.camel:camel-jgroups (>=4.0.0-m1, <=4.18.4)

org.apache.camel:camel-jgroups MAVEN version =4.0.0-m1, =4.7.0, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.6.0, =4.0.0-m1, =4.18.4 Source cves: CVE-2026-88900 Source advisory: MEND:CVE-2026-88900...

CVE-2026-78234

A flaw was found in hawtio-operator. The operator reads the OpenShift Service CA private signing key from the openshift-service-ca namespace and uses it to mint client certificates with a Subject Common Name CN supplied by the author of a namespaced Hawtio custom resource. Because the operator...

Kubernetes API BIND

BIND payload for listeners/container/kubernetesapi. Operator authenticates to the cluster API kubeconfig, token, or in-cluster SA on operator host. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.c2.kubernetesbind import buildkubernetesbindhint class ModulePayload: info...

org.apache.camel.quarkus:camel-quarkus-consul (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-consul-deployment (>=3.35.0, <=3.36.0) +3 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-consul (>=4.19.0, <=4.20.0)

org.apache.camel:camel-consul MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-42527 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17890719...

org.apache.camel.quarkus:camel-quarkus-consul (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-consul-deployment (>=3.35.0, <=3.36.0) +3 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-consul (>=4.19.0, <=4.20.0)

org.apache.camel:camel-consul MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-42527 Source advisory: GHSA-8H6P-JVHF-9HCR...

org.apache.camel.quarkus:camel-quarkus-infinispan (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-infinispan-cluster-service (>=3.35.0, <=3.36.0) +8 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-infinispan (>=4.19.0, <=4.20.0)

org.apache.camel:camel-infinispan MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-42527 Source advisory: GHSA-8H6P-JVHF-9HCR...

org.apache.camel.quarkus:camel-quarkus-consul (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-consul-deployment (>=3.35.0, <=3.36.0) +3 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-consul (>=4.19.0, <=4.20.0)

org.apache.camel:camel-consul MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-42527 Source advisory: MEND:CVE-2026-42527...

📄 Apache Airflow Databricks Provider Certificate Verification Bypass

The Apache Airflow Databricks Provider package disables TLS certificate verification when communicating with the Kubernetes API server during federated token exchange. Both the synchronous and asynchronous code paths use verify=False / ssl=False, allowing any attacker with network access within t...

org.apache.camel.springboot:camel-infinispan-cluster-service-starter (4.19.0), org.apache.camel.springboot:camel-infinispan-starter (4.19.0) potentially affected by CVE-2026-40858 via org.apache.camel:camel-infinispan (4.19.0)

org.apache.camel:camel-infinispan MAVEN version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.springboot:camel-infinispan-cluster-service-starter 4.19.0 -...

org.apache.camel.kafkaconnector:camel-consul-kafka-connector (>=0.1.0, <=0.11.5), org.apache.camel.karaf:camel-consul (>=4.7.0, <=4.14.5) +7 more potentially affected by CVE-2026-27172 via org.apache.camel:camel-consul (>=3.0.0, <=4.14.5)

org.apache.camel:camel-consul MAVEN version =3.0.0, =0.1.0, =4.7.0, =4.8.1, =1.0.0-m3, =1.0.0-m3, =1.0.0-m3, =4.6.0, =3.0.0, =4.14.5 - org.wildfly.camel:wildfly-camel-itests-standalone-docker 12.0.0 Source cves: CVE-2026-27172 Source advisory: OSV:GHSA-5RC6-9QFP-8VWG...

org.apache.camel.springboot:camel-infinispan-cluster-service-starter (4.19.0), org.apache.camel.springboot:camel-infinispan-starter (4.19.0) potentially affected by CVE-2026-40858 via org.apache.camel:camel-infinispan (4.19.0)

org.apache.camel:camel-infinispan MAVEN version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.springboot:camel-infinispan-cluster-service-starter 4.19.0 -...

org.apache.camel.quarkus:camel-quarkus-consul (>=3.29.0, <=3.33.0), org.apache.camel.quarkus:camel-quarkus-consul-deployment (>=3.29.0, <=3.33.0) +3 more potentially affected by CVE-2026-27172 via org.apache.camel:camel-consul (>=4.15.0, <=4.18.0)

org.apache.camel:camel-consul MAVEN version =4.15.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.15.0, =4.18.0 Source cves: CVE-2026-27172 Source advisory: OSV:GHSA-5RC6-9QFP-8VWG...

org.apache.camel.quarkus:camel-quarkus-consul (>=3.29.0, <=3.33.0), org.apache.camel.quarkus:camel-quarkus-consul-deployment (>=3.29.0, <=3.33.0) +3 more potentially affected by CVE-2026-27172 via org.apache.camel:camel-consul (>=4.15.0, <=4.18.0)

org.apache.camel:camel-consul MAVEN version =4.15.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.15.0, =4.18.0 Source cves: CVE-2026-27172 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-16321641...

org.apache.camel.kafkaconnector:camel-infinispan-sink-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.kafkaconnector:camel-infinispan-source-kafka-connector (>=4.0.0, <=4.14.5) +8 more potentially affected by CVE-2026-40858 +1 more via org.apache.camel:camel-infinispan (>=4.0.0-m1, <=4.14.6)

org.apache.camel:camel-infinispan MAVEN version =4.0.0-m1, =4.0.0, =4.0.0, =4.7.0, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.6.0, =4.0.0-m1, =4.14.6 Source cves: CVE-2026-40858, CVE-2026-6857 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-16321656...

org.apache.camel.springboot:camel-infinispan-cluster-service-starter (4.19.0), org.apache.camel.springboot:camel-infinispan-starter (4.19.0) potentially affected by CVE-2026-40858 +1 more via org.apache.camel:camel-infinispan (4.19.0)

org.apache.camel:camel-infinispan MAVEN version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.springboot:camel-infinispan-cluster-service-starter 4.19.0 -...

org.apache.camel.springboot:camel-infinispan-cluster-service-starter (4.19.0), org.apache.camel.springboot:camel-infinispan-starter (4.19.0) potentially affected by CVE-2026-40858 via org.apache.camel:camel-infinispan (4.19.0)

org.apache.camel:camel-infinispan MAVEN version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.springboot:camel-infinispan-cluster-service-starter 4.19.0 -...

CVE-2026-25770

Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 3.9.0 and prior to version 4.14.3, a privilege escalation vulnerability exists in the Wazuh Manager's cluster synchronization protocol. The wazuh-clusterd service allows authenticated...

RHSA-2026:2484 Red Hat Security Advisory: pcs security update

Bulletin has no description...

EUVD-2025-131920

A flaw was found in the Observability Operator. The Operator creates a ServiceAccount with ClusterRole upon deployment of the Namespace-Scoped Custom Resource MonitorStack. This issue allows an adversarial Kubernetes Account with only namespaced-level roles, for example, a tenant controlling a...

CVE-2025-2843

The CVE-2025-2843 issue affects the Observability Operator. It creates a ServiceAccount with ClusterRole permissions when deploying the Namespace-Scoped MonitorStack CR, enabling a namespaced Kubernetes user to create a MonitorStack in their namespace and then escalate to cluster-level privileges...