GO-2024-2978 vulnerabilities

Vulnerabilities for packages: k3d, grpc-health-probe, kubernetes-csi-external-provisioner, step, zarf, cert-manager-cmctl, kwok, certificate-transparency, terragrunt, terraform-provider-google, guac, terraform-docs, spicedb, cloudnative-pg, spire-server, spegel, melange, sigstore-scaffolding,...

GO-2025-4097 vulnerabilities

Vulnerabilities for packages: kubernetes, falco-no-driver, nvidia-container-toolkit, grafana-alloy, podman, k3s, sriov-network-device-plugin, buildah, node-feature-discovery...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: cadvisor, nvidia-container-toolkit, podman, sriov-network-device-plugin, buildah, k8s-device-plugin, node-feature-discovery...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: cadvisor, docker, kubernetes, syft, grafana-alloy, grype, ctop, opentelemetry-collector-contrib, podman, k3s, runc, buildah, k8s-device-plugin, neuvector-scanner...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, kubernetes-csi-driver-hostpath, kubeflow-pipelines, nodetaint, local-static-provisioner, spark-operator, k8s-device-plugin, kubernetes-dns-node-cache, cri-tools, argocd-image-updater, ip-masq-agent...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines, nodetaint, local-static-provisioner, k8s-device-plugin, kubernetes-dns-node-cache, argocd-image-updater, ip-masq-agent...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: gitness, k3s, runc, k8s-device-plugin, wuzz, fuse-overlayfs-snapshotter, aws-load-balancer-controller...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: gitness, k3s, runc, k8s-device-plugin, wuzz, fuse-overlayfs-snapshotter, aws-load-balancer-controller...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: prometheus, aactl, kubernetes, karpenter, istio, kine, kube-fluentd-operator, flux, newrelic-fluent-bit-output, telegraf, cert-manager, chezmoi, cilium, gitlab-kas, snyk-cli, spire-server, mattermost, kubernetes-csi-node-driver-registrar, aws-flb-cloudwatch,...

PT-2026-72031

Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the...

PT-2026-72033

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the event notification functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to corrupt kernel heap and...

CVE-2026-18164

creationtimestamp| type| source ---|---|--- 2026-08-13 20:15:03+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-225-01...

EUVD-2026-58240

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker v2.0.22 that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights...

CVE-2026-73669 Signify Philips Hue Bridge Pro MQTT broker missing authentication

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker service that listens on all network interfaces without authentication. An unauthenticated attacker with network access to the MQTT service on a vulnerable system can read data and control connected lights. Fixed in...

SUSE CVE-2026-68180

In the Linux kernel, the following vulnerability has been resolved: intelth: fix MSC output device reference leak intelthoutputopen looks up the output device with busfinddevicebydevt, which returns the device with a reference that must be dropped after use. commit 95fc36a234da "intelth: fix devi...

CVE-2026-16101

Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below...

Philips Hue Bridge Pro

RISK EVALUATION The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker v2.0.22 that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights...

CVE-2026-19293 SMP security request

SMP security request from peripheral does not include the maximum encryption key size supported. Using a key with less than the maximum keysize makes brute-forcing the key easier. See V6 in BLERP paper linked below...

CVE-2026-19293

The vulnerability CVE-2026-19293 concerns the BLE SMP (Security Manager Protocol) security request where the peripheral omits the maximum supported encryption key size. This omission can allow brute-forcing of the key more easily for an adjacent attacker. The entry cites the BLERP paper and provi...

CLEANSTART-2026-JJ69031 Security fixes in smarter-device-manager-fips 1.20.11-r1

Package smarter-device-manager-fips version 1.20.11-r1 fixes 3 vulnerabilities: CVE-2026-46600, CVE-2026-33814, ghsa-5cv4-jp36-h3mw...