CVE-2026-75569

creationtimestamp| type| source ---|---|--- 2026-08-19 22:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthq74bxeo27...

CVE-2026-75569 Mce-operator-bundle: all github actions pinned by mutable tag, not commit sha

A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute...