62458 matches found
CVE-2026-58165 OpenZiti - Privilege Escalation to Admin via Unauthorized Enrollment Creation
OpenZiti through 2.0.0, fixed in commit 3027fdf, contains a privilege escalation vulnerability that allows authenticated non-admin identities with fine-grained enrollment management permissions to create enrollments for any identity, including the default administrator, because the ApplyCreate...
CVE-2026-58165 OpenZiti - Privilege Escalation to Admin via Unauthorized Enrollment Creation
OpenZiti through 2.0.0, fixed in commit 3027fdf, contains a privilege escalation vulnerability that allows authenticated non-admin identities with fine-grained enrollment management permissions to create enrollments for any identity, including the default administrator, because the ApplyCreate...
CVE-2026-58011
creationtimestamp| type| source ---|---|--- 2026-06-30 14:45:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjakneukd2m 2026-07-03 12:19:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqjrcmvoq2d 2026-07-21 12:00:54+00:00| seen|...
mariadb: mbstream: Unauthorized file creation via path traversal
A flaw was found in MariaDB's mbstream utility. This vulnerability allows a highly privileged local attacker, who can provide a specially crafted archive, to create files outside of the intended target directory. This is due to mbstream not properly validating paths containing directory traversal...
CVE-2026-44949 Unauthenticated namespace creation and RBAC injection via rancher-webhook FleetWorkspace mutating webhook
A Rancher FleetWorkspace admission path allowed side effects to occur in the Rancher webhook handler for versions 0.7.0 up to 0.7.10, 0.8.0 up to 0.8.7, 0.9.0 up to 0.9.6 and 0.10.0 up to 0.10.7. An unauthenticated attacker with network access to the in-cluster rancher-webhook service could submi...
CVE-2026-44949 Unauthenticated namespace creation and RBAC injection via rancher-webhook FleetWorkspace mutating webhook
A Rancher FleetWorkspace admission path allowed side effects to occur in the Rancher webhook handler for versions 0.7.0 up to 0.7.10, 0.8.0 up to 0.8.7, 0.9.0 up to 0.9.6 and 0.10.0 up to 0.10.7. An unauthenticated attacker with network access to the in-cluster rancher-webhook service could submi...
CVE-2026-44949
Summary: CVE-2026-44949 pertains to a vulnerability in the Rancher FleetWorkspace mutating webhook handled by the in-cluster rancher-webhook service. Affected versions: 0.7.0–0.7.10, 0.8.0–0.8.7, 0.9.0–0.9.6, and 0.10.0–0.10.7. Impact: An unauthenticated attacker with network access to the webhoo...
CVE-2026-53433
creationtimestamp| type| source ---|---|--- 2026-06-30 14:08:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj6i7jyks2z 2026-07-01 02:37:36+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-53432 2026-07-03 12:15:16+00:00| seen|...
CVE-2026-44946
creationtimestamp| type| source ---|---|--- 2026-06-30 13:57:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj5usfmcc2z 2026-06-30 23:31:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116841661870307967 2026-07-03 06:07:07+00:00| seen|...
CVE-2026-47105
creationtimestamp| type| source ---|---|--- 2026-06-30 13:51:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj5j4kyvg2z...
mariadb: mbstream: Unauthorized file creation via path traversal
A flaw was found in MariaDB's mbstream utility. This vulnerability allows a highly privileged local attacker, who can provide a specially crafted archive, to create files outside of the intended target directory. This is due to mbstream not properly validating paths containing directory traversal...
CVE-2026-57637
creationtimestamp| type| source ---|---|--- 2026-06-30 12:17:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpiyatzvyv2j...
EDB-14146
creationtimestamp| type| source ---|---|--- 2026-06-30 11:40:03+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e21c51a4-c763-4cfa-b829-93bd06110368...
CVE-2026-13558
creationtimestamp| type| source ---|---|--- 2026-06-30 11:39:40+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mpiw5w4cb32f...
OPENSUSE-SU-2026:21182-1 Security update for python-python-engineio
This update for python-python-engineio fixes the following issues: Changes in python-python-engineio: - CVE-2026-48802: remote user can cause the creation of unnecessary background threads in the server through the heartbeat mechanism and cause a DoS bsc1269544 - CVE-2026-48809: size of incoming...
mariadb: mbstream: Unauthorized file creation via path traversal
A flaw was found in MariaDB's mbstream utility. This vulnerability allows a highly privileged local attacker, who can provide a specially crafted archive, to create files outside of the intended target directory. This is due to mbstream not properly validating paths containing directory traversal...
CVE-2026-45822
creationtimestamp| type| source ---|---|--- 2026-06-30 10:45:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpit55dn3724 2026-08-28 13:00:05+00:00| seen| Telegram/CfRvWZv5RrUF8689qv7kg16a3mW0159b7rTcNr-wYLT-sQY 2026-08-29 00:00:09+00:00| seen|...
CVE-2026-12240
creationtimestamp| type| source ---|---|--- 2026-06-30 10:26:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpis2mbdhh2u 2026-06-30 22:17:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpjzrq4vsk2i...
CVE-2026-13149
creationtimestamp| type| source ---|---|--- 2026-06-30 10:02:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpiqqalrc32y 2026-07-20 21:31:31+00:00| seen| https://gist.github.com/alon710/8cb13493a0f92ed662f2d6291bd0d794 2026-07-20 22:37:51+00:00| published-proof-of-concept|...