CVE-2026-58222

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller AD DC. When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search ...

CVE-2026-58222 Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller AD DC. When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search ...

CVE-2026-58222

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller AD DC. When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search ...

CVE-2026-58222 Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller AD DC. When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search ...

EUVD-2026-51139

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to perform SSRF attacks with elevated privileges when the collectiveController-1.0 feature is enabled...

CVE-2026-14980 IBM WebSphere Application Server Liberty is affected by a cross-site request forgery

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to perform SSRF attacks with elevated privileges when the collectiveController-1.0 feature is enabled...

CVE-2026-14980 IBM WebSphere Application Server Liberty is affected by a cross-site request forgery

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to perform SSRF attacks with elevated privileges when the collectiveController-1.0 feature is enabled...

CVE-2026-58221

A flaw was found in Samba Active Directory Domain Controller AD DC. Improper authorization checks allow an authenticated low-privilege domain user to modify internal LDB special records through LDAP. By altering the DSDB module configuration, an attacker can bypass directory ACL enforcement on ne...

CVE-2026-44107

A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack...

CVE-2026-44104

The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise...

CVE-2026-13584

Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller MX-F model, Master/local module, CC-Link IE TSN interface board, Motion module, MELSEC iQ-L Series Motion Module,...

CLEANSTART-2026-VB84129 Security fixes in kapp-controller 0.59.0-r0

Package kapp-controller version 0.59.0-r0 fixes 3 vulnerabilities: ghsa-6v2p-p543-phr9, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-QV63914 Security fixes in ingress-nginx-controller 1.24.2-r0

Package ingress-nginx-controller version 1.24.2-r0 fixes 9 vulnerabilities: CVE-2025-22871, CVE-2025-4673, CVE-2024-45341, CVE-2024-45336, CVE-2025-0913...

CLEANSTART-2026-TQ49781 Security fixes in ingress-nginx-controller-1.15 1.15.1-r2

Package ingress-nginx-controller-1.15 version 1.15.1-r2 fixes 3 vulnerabilities: CVE-2026-42504, CVE-2026-27145, CVE-2026-42507...

CLEANSTART-2026-KF63745 Security fixes in kapp-controller-fips 0.59.0-r2

Package kapp-controller-fips version 0.59.0-r2 fixes 7 vulnerabilities: CVE-2025-61726, CVE-2025-68121, CVE-2025-61728, CVE-2025-68119, CVE-2025-61731...

CLEANSTART-2026-CT53141 Security fixes in ingress-nginx-controller-1.14 1.14.5-r2

Package ingress-nginx-controller-1.14 version 1.14.5-r2 fixes 2 vulnerabilities: CVE-2026-45186, CVE-2026-41080...

CLEANSTART-2026-VY82100 Security fixes in ingress-nginx-controller-1.12 1.14.5-r2

Package ingress-nginx-controller-1.12 version 1.14.5-r2 fixes 2 vulnerabilities: CVE-2026-45186, CVE-2026-41080...

CLEANSTART-2026-JQ41614 Security fixes in kapp-controller 0.59.7-r0

Package kapp-controller version 0.59.7-r0 fixes 3 vulnerabilities: ghsa-mh2q-q3fh-2475, ghsa-hfvc-g4fc-pqhx, CVE-2026-39883...

CLEANSTART-2026-HT07063 Security fixes in policy-controller-fips 0.15.1-r0

Package policy-controller-fips version 0.15.1-r0 fixes 5 vulnerabilities: CVE-2026-34986, CVE-2026-39984, ghsa-pmwq-pjrm-6p5r, ghsa-78h2-9frx-2jm8, ghsa-xm5m-wgh2-rrg3...

CLEANSTART-2026-YS85875 Security fixes in policy-controller 0.12.1-r1

Package policy-controller version 0.12.1-r1 fixes 13 vulnerabilities: CVE-2025-8556, CVE-2026-1229, CVE-2025-15558, CVE-2025-46569, CVE-2026-22703...