CVE-2026-57301

Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller...

CVE-2026-57301

CVE-2026-57301 affects Jenkins OWASP ZAP Plugin,

CVE-2026-57296

CVE-2026-57296 - Jenkins External Workspace Manager Plugin : Affected: Jenkins External Workspace Manager Plugin 1.3.2 and earlier. Description: the exwsAllocate pipeline step accepts a custom workspace path without rejecting path traversal sequences, enabling attackers with Item/Configure permis...

PT-2026-51945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A CBB Control Backbone timeout occurs in the tegra194 PCI implementation when PERST is deasserted twice. This issue arises because the functions pci epc deinit notify and dw pcie ep...

PT-2026-51967

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth component where HCI UART PROTO INIT is not cleared when hci register dev fails within the hci uart register dev function. This failure allows incoming UA...

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security Update (Critical) (RHSA-2026:28376)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:28376 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers ca...

CVE-2026-10609

A missing authorization flaw was found in the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying that the ClusterLogForwarder creator has permission to use those credentials, allowing a delegated editor to exfiltrat...

GHSA-VJHF-6XFR-5P9G vulnerabilities

Vulnerabilities for packages: harvester-fips, virt-operator-fips, virt-operator, harvester, virt-launcher, virt-controller-fips...

GHSA-4Q63-MR2M-57HF vulnerabilities

Vulnerabilities for packages: harvester-fips, virt-operator-fips, virt-operator, harvester, virt-launcher, virt-controller-fips...

CVE-2024-33394 vulnerabilities

Vulnerabilities for packages: harvester-fips, virt-operator-fips, virt-operator, harvester, virt-launcher, virt-controller-fips...

GHSA-25MH-HP8X-CGRV vulnerabilities

Vulnerabilities for packages: harvester-fips, virt-operator-fips, harvester, virt-launcher, virt-controller-fips, virt-handler...

CVE-2025-14525 vulnerabilities

Vulnerabilities for packages: harvester-fips, virt-operator-fips, harvester, virt-launcher, virt-controller-fips, virt-handler...

CVE-2024-31420 vulnerabilities

Vulnerabilities for packages: harvester-fips, virt-operator-fips, virt-operator, harvester, virt-launcher, virt-controller-fips...

GHSA-RJFV-PJVX-MJGV vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller-fips, aws-load-balancer-controller...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: buildkitd, newrelic-infrastructure-agent, helm-exporter-fips, xeol-fips, packer, zarf-fips, fuse-overlayfs-snapshotter, trivy-operator, buildkitd-fips, rancher-agent, grype-fips, chaos-mesh-fips, amazon-ecs-agent-fips, eksctl, helmfile, tw, grype, kgateway, trivy,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: promxy, bank-vaults, fluent-operator-fips, longhorn-manager, crossplane-provider-aws-kafka, cert-manager-webhook-pdns, azuredisk-csi, newrelic-infrastructure-agent, crossplane-provider-azure-security, crossplane-provider-aws-osis-fips, eks-node-monitoring-agent-fips,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: promxy, bank-vaults, fluent-operator-fips, longhorn-manager, crossplane-provider-aws-kafka, cert-manager-webhook-pdns, azuredisk-csi, newrelic-infrastructure-agent, crossplane-provider-azure-security, crossplane-provider-aws-osis-fips, eks-node-monitoring-agent-fips,...

samba: Remote Code Execution in SAMR

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper...

PT-2026-51642

Name of the Vulnerable Software and Affected Versions Snipe-IT affected versions not specified Description An authorization bypass exists in the BulkAssetsController::update function. The system accepts the company id variable directly from user input without utilizing the standard company-scopin...

kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg()

A flaw was found in the Linux kernel's Controller Area Network CAN ISO-TP isotp module. This vulnerability, known as a use-after-free, occurs when the system attempts to free a memory region while it is still being used. A local attacker could trigger this condition by sending a signal that...