Rancher has Privilege Escalation from Project Owner to Host

Impact A vulnerability has been identified in Rancher Manager that allows users assigned the Project Owner role to modify Pod Security Admission PSA labels on namespaces within their projects. Under the default role configuration, an attacker with the following access pattern can exploit this...

CVE-2026-13874

creationtimestamp| type| source ---|---|--- 2026-07-01 20:41:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmevvwwou2b 2026-07-02 07:21:55+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:17:29+00:00| seen|...

CVE-2026-49119

creationtimestamp| type| source ---|---|--- 2026-07-01 20:41:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmeva52lk2i 2026-07-02 10:29:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnt6rcytn2m 2026-07-02 10:29:49+00:00| seen|...

CVE-2026-13885

creationtimestamp| type| source ---|---|--- 2026-07-01 20:40:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmetsdtxb2d 2026-07-02 07:22:22+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 18:50:59+00:00| seen|...

CVE-2026-13883

creationtimestamp| type| source ---|---|--- 2026-07-01 20:40:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmet2n7t62i 2026-07-02 07:22:17+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:17:49+00:00| seen|...

CVE-2026-13877

creationtimestamp| type| source ---|---|--- 2026-07-01 20:35:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmekvu2dg2q 2026-07-02 07:22:02+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:17:38+00:00| seen|...

GHSA-WP87-MGVQ-5J93 SurrealDB: USE NS/DB implicit creation bypasses DEFINE authorization

An anonymous caller could create new namespaces and databases on a running SurrealDB instance without holding DEFINE NAMESPACE or DEFINE DATABASE permission. USE NS and USE DB automatically create the target when it does not exist. The three places USE is handled — the RPC use method,...

SurrealDB: USE NS/DB implicit creation bypasses DEFINE authorization

An anonymous caller could create new namespaces and databases on a running SurrealDB instance without holding DEFINE NAMESPACE or DEFINE DATABASE permission. USE NS and USE DB automatically create the target when it does not exist. The three places USE is handled — the RPC use method,...

WordPress LatePoint – Calendar Booking Plugin for Appointments and Events plugin <= 5.6.2 - Unauthenticated Insecure Direct Object Reference to Arbitrary Creation vulnerability

Unauthenticated Insecure Direct Object Reference to Arbitrary Creation vulnerability discovered by gidget smith in WordPress Plugin LatePoint versions = 5.6.2...

WordPress JoomSport – for Sports: Team & League, Football, Hockey & more plugin <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification vulnerability

Authenticated Subscriber+ Missing Authorization to Arbitrary Group Creation/Modification vulnerability discovered by ? in WordPress Plugin JoomSport versions = 5.7.8...

CVE-2026-13824

creationtimestamp| type| source ---|---|--- 2026-07-01 19:57:25+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmcguh3752x 2026-07-01 19:57:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmcgufwpg2i 2026-07-02 01:07:47+00:00| seen|...

CVE-2026-13826

creationtimestamp| type| source ---|---|--- 2026-07-01 19:46:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmbtkbi3d2y 2026-07-02 07:20:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702...

CVE-2026-36541

creationtimestamp| type| source ---|---|--- 2026-07-01 19:37:03+00:00| seen| https://gist.github.com/justinbrick/fad199753a9a4afbaddda05651a45d15...

Directory Traversal

Overview github.com/hashicorp/vault/vault is a tool for securely accessing secrets. Affected versions of this package are vulnerable to Directory Traversal in the audit device validation logic when the legacy file audit path option is enabled. An attacker can access unauthorized directories by...

CVE-2026-57155

creationtimestamp| type| source ---|---|--- 2026-07-01 18:34:11+00:00| seen| https://bsky.app/profile/bestofhn.bsky.social/post/3mpm5rz56h52r 2026-07-07 11:00:05+00:00| seen| https://bsky.app/profile/diesec.bsky.social/post/3mq2h7kpxrk2h 2026-07-09 13:06:27+00:00| seen|...

CVE-2026-7803

creationtimestamp| type| source ---|---|--- 2026-07-01 18:32:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm5pvkrcc2b 2026-07-03 04:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mppobh2bey22 2026-07-03 04:09:11+00:00| seen|...

CVE-2026-3602

creationtimestamp| type| source ---|---|--- 2026-07-01 18:10:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm4hjvimt2o 2026-07-03 10:04:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqcaezwlb2d...

CVE-2026-47262

CVE-2026-47262 affects containerd where a maliciously crafted image can trigger a Denial of Service by exhausting memory during container creation, causing an Out-Of-Memory (OOM) kill of the containerd process and making the runtime API unavailable (impacting clients like Docker Engine and Kubern...

CVE-2026-34104

creationtimestamp| type| source ---|---|--- 2026-07-01 17:38:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpm2ont42f27 2026-07-02 09:49:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnqwujfar2m...

CVE-2026-34102

creationtimestamp| type| source ---|---|--- 2026-07-01 17:34:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpm2gy7a572n 2026-07-02 08:26:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnmd5kgjm2y 2026-07-02 09:46:35+00:00| seen|...