CVE-2026-82870

ToolJet before v3.16.208 contains a cross-tenant database manipulation vulnerability caused by missing organization-resolving guards in its database write and destroy routes. Any user with a builder-role can bypass organizationId ownership validation, allowing them to create, alter, or permanentl...

CVE-2026-62440

Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service CKS plugin, allowing cross-tenant manipulation of the Kubernetes cluster while adding and removing nodes. This issue affects Apache CloudStack: from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to versi...

CVE-2026-62440

An Improper Access Control vulnerability exists in the Kubernetes Service (CKS) plugin of Apache CloudStack , affecting versions 4.21.0.0 through 4.22.1.0 . This flaw allows for cross-tenant manipulation of the Kubernetes cluster specifically during the processes of adding and removing nodes . To...

EUVD-2026-63835

Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service CKS plugin, allowing cross-tenant manipulation of the Kubernetes cluster while adding and removing nodes. This issue affects Apache CloudStack: from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to versi...

PT-2026-79328

Name of the Vulnerable Software and Affected Versions Apache CloudStack versions 4.21.0.0 through 4.22.1.0 Description Improper Access Control in the Kubernetes Service CKS plugin allows cross-tenant manipulation of the Kubernetes cluster during the process of adding and removing nodes...

CVE-2026-62440: Improper Access Control

Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service CKS plugin, allowing cross-tenant manipulation of the Kubernetes cluster while adding and removing nodes. This issue affects Apache CloudStack: from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to versi...

Debian dsa-6452 : designate - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6452 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6452-1 [email protected] https://www.debian.org/securit...