AZL-95985 CVE-2026-47766 affecting package crun 1.24-5

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

CVE-2026-47766 crun follows rootfs /dev symlink while creating default devices

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

CVE-2026-47766

CVE-2026-47766 affects crun prior to version 1.28. When an OCI bundle uses a symlink for rootfs/dev and the bundle omits mounting /dev, crun may follow the symlink and create default device nodes and stdio symlinks at the symlink target outside the container rootfs. In a local rootful crun replay...

EUVD-2026-58675

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the event notification functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to corrupt kernel heap and...

CVE-2026-13196

Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the...

GO-2023-2095 vulnerabilities

Vulnerabilities for packages: kind, smarter-device-manager-fips, configmap-reload-fips, kubeflow-katib, metrics-server...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, neuvector-scanner, grype, grafana-alloy-fips, node-feature-discovery, eks-distro, grafana-alloy, cluster-autoscaler, runc, kubernetes-fips, opentelemetry-collector-contrib-fips, cadvisor-fips, buildah, neuvector-scanner-fips, cadvisor,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: ferretdb, k8sgpt-operator, grafana-mimir, sops, osv-scanner, gomplate, spicedb, fulcio, kargo, kwok, hubble-ui, kubernetes-csi-driver-hostpath, kots, kube-rbac-proxy, spire-server, k3d, falcosidekick, cilium-cli, ksops, grpc-health-probe, terraform-docs, dagger,...

GO-2025-4097 vulnerabilities

Vulnerabilities for packages: podman, kubernetes, k3s, sriov-network-device-plugin, node-feature-discovery, falco-no-driver, buildah, grafana-alloy, nvidia-container-toolkit...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: podman, k8s-device-plugin, cadvisor, sriov-network-device-plugin, node-feature-discovery, buildah, nvidia-container-toolkit...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: runc, podman, ctop, k8s-device-plugin, kubernetes, cadvisor, k3s, neuvector-scanner, docker, syft, buildah, grype, grafana-alloy, opentelemetry-collector-contrib...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, kubeflow-pipelines, k8s-device-plugin, kubernetes-csi-driver-hostpath, spark-operator, kubernetes-dns-node-cache, local-static-provisioner, argocd-image-updater, cri-tools, aws-efs-csi-driver, nodetaint...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: runc, k8s-device-plugin, fuse-overlayfs-snapshotter, k3s, gitness, wuzz, aws-load-balancer-controller...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: runc, k8s-device-plugin, fuse-overlayfs-snapshotter, k3s, gitness, wuzz, aws-load-balancer-controller...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, ip-masq-agent, k8s-device-plugin, kubernetes-dns-node-cache, local-static-provisioner, argocd-image-updater, aws-efs-csi-driver, nodetaint...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: hubble, kine, k8s-device-plugin, external-secrets-operator, kaf, cloud-provider-aws, fscrypt, kubescape, chezmoi, gitlab-kas, gitlab-pages, mattermost, runc, kots, fuse-overlayfs-snapshotter, ingress-nginx-controller, external-dns, spire-server, prometheus, telegraf,...

PT-2026-72031

Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the...

PT-2026-72033

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the event notification functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to corrupt kernel heap and...

CVE-2026-18164

creationtimestamp| type| source ---|---|--- 2026-08-13 20:15:03+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-225-01...

EUVD-2026-58240

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker v2.0.22 that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights...