Linux Distros Unpatched Vulnerability : CVE-2026-34179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Canonical LXD versions 4.12 through 6.7, the doCertificateUpdate function in lxd/certificates.go does not validate the Type field when handling PUT/PATCH...

Wazuh 4.14.2 Code Execution / Insecure Deserialization

A critical vulnerability in Wazuh cluster mode allows an attacker with access to a worker node to send malicious serialized payloads that are processed by the master node, resulting in remote code execution with root privileges. Versions 4.0.0 through 4.14.2 are affected...

Wazuh Manager Privilege Escalation

The vulnerability of the cluster synchronization component in Wazuh Manager, a platform for security monitoring and threat detection, is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability can allow a malicious actor to increase their privileges...

[SECURITY] Fedora 42 Update: corosync-3.1.9-4.fc42

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: k8sgpt, cilium-cli, istio, cluster-api-helm-controller, trivy, zarf, helm-set-status, chartmuseum, nova, helm-push, linkerd2, k8ssandra-client, cert-manager-cmctl, zot, harbor, helm-docs, helm, rancher-fleet, kube-arangodb, helm-operator, kuma, cerbos, flux,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: k8sgpt, cilium-cli, istio, cluster-api-helm-controller, trivy, zarf, helm-set-status, chartmuseum, nova, helm-push, linkerd2, k8ssandra-client, cert-manager-cmctl, zot, harbor, helm-docs, helm, rancher-fleet, kube-arangodb, helm-operator, kuma, cerbos, flux,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: kots, linkerd2, flux-fips, cerbos, kuma, teleport, chart-testing-fips, k8sgpt, chaos-mesh-fips, kubescape-server, tw, flux-source-controller, flux, flux-source-controller-fips, helm-set-status, trivy-fips, gitlab-operator-fips, cerbos-fips, headlamp, helm, eksctl,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: falcoctl, dask-gateway, apko, grafana-mimir, filebrowser, kubernetes-dashboard-metrics-scraper, custom-pod-autoscaler, govulncheck, amass, gitaly, buildah, terraform-provider-aws, sftpgo-plugin-pubsub, terraform-mcp-server, yace, gitlab-pages, prometheus-operator,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: falcoctl, dask-gateway, apko, grafana-mimir, filebrowser, kubernetes-dashboard-metrics-scraper, custom-pod-autoscaler, govulncheck, amass, gitaly, buildah, terraform-provider-aws, sftpgo-plugin-pubsub, terraform-mcp-server, yace, gitlab-pages, prometheus-operator,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: falcoctl, dask-gateway, apko, grafana-mimir, filebrowser, kubernetes-dashboard-metrics-scraper, custom-pod-autoscaler, govulncheck, amass, gitaly, buildah, terraform-provider-aws, sftpgo-plugin-pubsub, terraform-mcp-server, yace, gitlab-pages, prometheus-operator,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: kots, linkerd2, flux-fips, cerbos, kuma, teleport, chart-testing-fips, k8sgpt, chaos-mesh-fips, kubescape-server, tw, flux-source-controller, flux, flux-source-controller-fips, helm-set-status, trivy-fips, gitlab-operator-fips, cerbos-fips, headlamp, helm, eksctl,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: kuma, neuvector-scanner-fips, influxd, knative-serving, kubernetes-csi-node-driver-registrar-fips, cosign, prometheus-podman-exporter-fips, gosu, pulumi-language-yaml, oras, docker-cli-buildx-fips, k8ssandra-client, elastic-agent-fips, kubevirt-cdi-uploadserver, kbld...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: kuma, neuvector-scanner-fips, influxd, knative-serving, kubernetes-csi-node-driver-registrar-fips, cosign, prometheus-podman-exporter-fips, gosu, pulumi-language-yaml, oras, docker-cli-buildx-fips, k8ssandra-client, elastic-agent-fips, kubevirt-cdi-uploadserver, kbld...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-kyverno-plugin-fips, redis-operator, kyverno-policy-reporter-plugins-trivy, neuvector-scanner-fips, knative-serving, certificate-transparency-fips, tempo-fips, ytt, git-sync-fips, longhorn-cli-fips, fluxcd-kustomize-mutating-webhook-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-kyverno-plugin-fips, volcano-fips, redis-operator, kubectx, kuma, kyverno-policy-reporter-plugins-trivy, neuvector-scanner-fips, influxd, cloudnative-pg, knative-serving, kubernetes-csi-node-driver-registrar-fips, sftpgo-plugin-eventstore,...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the AdminService/StreamWorkflowReplicationMessages endpoint. An attacker can access replication streams and exfiltrate data by connecting to the frontend gRPC server without providing...

EUVD-2026-21607

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

CVE-2026-5724

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

EUVD-2026-20876

LXD: Update of type field in restricted TLS certificate allows privilege escalation to cluster admin...

GHSA-C3H3-89QF-JQM5 LXD: Update of type field in restricted TLS certificate allows privilege escalation to cluster admin

Summary A restricted TLS certificate user can escalate to cluster admin by changing their certificate type from client to server via PUT/PATCH to /1.0/certificates/fingerprint. The non-admin guard and reset block in doCertificateUpdate fail to validate or reset the Type field, allowing a...