Unity Linux 20.1050e / 20.1070e Security Update: etcd (UTSA-2026-016819)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016819 advisory. Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. Tenable has extracted the preceding...

CVE-2026-42880 ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to before 3.2.11 and 3.3.0 to before 3.3.9, there is a missing authorization and data-masking gap in Argo CD's ServerSideDiff endpoint that allows an attacker with read-only access to extract plaintext...

CVE-2026-42880

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to before 3.2.11 and 3.3.0 to before 3.3.9, there is a missing authorization and data-masking gap in Argo CD's ServerSideDiff endpoint that allows an attacker with read-only access to extract plaintext...

etcd RBAC bypass allows unauthorized data access via PrevKv/lease attachment in nested transaction Put requests

Impact What kind of vulnerability is it? Who is impacted? A vulnerability in etcd allows read access via PrevKv, or lease attachment in Put requests within transaction operations, to bypass RBAC authorization checks. An authenticated user without sufficient read or lease-related permissions may b...

GHSA-X35M-3GP4-4FH5 etcd RBAC bypass allows unauthorized data access via PrevKv/lease attachment in nested transaction Put requests

Impact What kind of vulnerability is it? Who is impacted? A vulnerability in etcd allows read access via PrevKv, or lease attachment in Put requests within transaction operations, to bypass RBAC authorization checks. An authenticated user without sufficient read or lease-related permissions may b...

ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction

Summary There is a missing authorization and data-masking gap in Argo CD's ServerSideDiff endpoint that allows an attacker with read-only access to extract plaintext Kubernetes Secret data from etcd via the Kubernetes API server's Server-Side Apply dry-run mechanism. Details Argo CD masks Secret...

Argo CD 信息泄露漏洞

Argo CD is an open-source tool developed by Argo for Kubernetes, designed for declarative GitOps continuous delivery. Versions of Argo CD prior to 3.2.11 and 3.3.0–3.3.9 contained a vulnerability related to information leakage. This vulnerability stemmed from a lack of authorization and data...

Important Photon OS Security Update - PHSA-2026-4.0-1012

Updates of 'vim', 'etcd' packages of Photon OS have been released...

RHCOS 3 : kubernetes (RHSA-2015:1945)

The remote Red Hat Enterprise Linux CoreOS 3 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1945 advisory. - Kubernetes: Missing name validation allows path traversal in etcd CVE-2015-5305 Note that Nessus has not tested for this issue but has...

PT-2026-38402

Name of the Vulnerable Software and Affected Versions etcd versions prior to 3.4.44 etcd versions prior to 3.5.30 etcd versions prior to 3.6.11 Description etcd is a distributed key-value store for distributed system data. A flaw allows authenticated users without sufficient read or lease-related...

Photon OS 5.0: Etcd PHSA-2026-5.0-0802

An update of the etcd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0802. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-33413 affecting package etcd for versions less than 3.5.28-1

CVE-2026-33413 affecting package etcd for versions less than 3.5.28-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-33343 affecting package etcd for versions less than 3.5.28-1

CVE-2026-33343 affecting package etcd for versions less than 3.5.28-1. An upgraded version of the package is available that resolves this issue...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kwok, cosign, nerdctl, rancher-fleet, sftpgo-plugin-eventstore, istio, kubescape, redpanda, swagger, cluster-api-provider-vsphere, snyk-cli, helm-mapkubeapis, k3s, bank-vaults, crossplane-provider-family-azure, caddy, kyverno-policy-reporter-kyverno-plugin, seaweedfs...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: kwok, cosign, conftest, crossplane-provider-aws-ec2, crossplane-provider-aws-memorydb, grafana-alloy, rancher-fleet, flyte, node-problem-detector, istio, haproxy-ingress, kubescape, cluster-api-provider-vsphere, docker, juicefs, snyk-cli, k3s, bank-vaults,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: cadence-fips, buildkitd, cass-operator-fips, kubo, crossplane-provider-azure-netapp, neuvector-sigstore-interface, crossplane-provider-aws-dynamodb, kcp-fips, kubedock-fips, falco-no-driver, k6-operator-fips, skaffold-fips, agentbeat-fips, eck-operator-fips, xeol,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: cadence-fips, buildkitd, cass-operator-fips, kubo, crossplane-provider-azure-netapp, neuvector-sigstore-interface, crossplane-provider-aws-dynamodb, kcp-fips, kubedock-fips, falco-no-driver, k6-operator-fips, skaffold-fips, agentbeat-fips, eck-operator-fips, xeol,...

GO-2026-4808 Nested etcd transactions bypass RBAC authorization checks in go.etcd.io/etcd

Nested etcd transactions bypass RBAC authorization checks in go.etcd.io/etcd...

GO-2026-4806 Authorization bypasses in multiple APIs in go.etcd.io/etcd

Authorization bypasses in multiple APIs in go.etcd.io/etcd...

CVE-2026-33413 affecting package etcd for versions less than 3.5.28-1

CVE-2026-33413 affecting package etcd for versions less than 3.5.28-1. An upgraded version of the package is available that resolves this issue...