CVE-2026-54366 CentreStack < 17.4 XXE via SharePoint Storage Configuration

CentreStack before 17.4 contains an XML external entity XXE injection vulnerability that allows unauthenticated attackers to exfiltrate arbitrary files by supplying a malicious URL to the SharePoint storage configuration handler. Attackers can send a crafted request to the unauthenticated...

CVE-2026-54366

CentreStack before 17.4 contains an XML external entity XXE injection vulnerability that allows unauthenticated attackers to exfiltrate arbitrary files by supplying a malicious URL to the SharePoint storage configuration handler. Attackers can send a crafted request to the unauthenticated...

Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents

Hidden instructions in a Word document can make Microsoft 365 Copilot rewrite figures in a report, then copy the same instructions into the finished file. Håkon Måløy disclosed the technique on July 28, 144 days after reporting it to Microsoft. In his proof of concept, the internally generated fi...

CVE-2026-52680

creationtimestamp| type| source ---|---|--- 2026-07-30 11:47:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/ffpd3ihundh7z 2026-07-31 19:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxndjqrcv2o 2026-08-04 11:00:05+00:00| published-proof-of-concept|...

OPENSUSE-SU-2026:21488-1 Security update for openvpn

This update for openvpn fixes the following issues: - CVE-2026-13122: denial of service via a malformed authentication token that triggers a reachable assertion when external-auth is enabled bsc1270413. - CVE-2026-13698: denial of service via memory leak triggered by remote attackers with a valid...

CLEANSTART-2026-SQ12998 Security fixes in external-secrets 1.1.0-r0

Package external-secrets version 1.1.0-r0 fixes 1 vulnerabilities: CVE-2025-61729...

CLEANSTART-2026-TB71092 Security fixes in kubernetes-csi-external-resizer-fips 2.1.0-r1

Package kubernetes-csi-external-resizer-fips version 2.1.0-r1 fixes 48 vulnerabilities: CVE-2026-27143, CVE-2026-27140, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281...

CLEANSTART-2026-BA39475 Security fixes in external-secrets-fips 0.17.0-r2

Package external-secrets-fips version 0.17.0-r2 fixes 75 vulnerabilities: CVE-2026-39820, CVE-2026-25679, CVE-2025-61726, CVE-2026-27143, CVE-2025-68121...

CLEANSTART-2026-VP54958 Security fixes in kubernetes-csi-external-attacher-fips 4.10.0-r0

Package kubernetes-csi-external-attacher-fips version 4.10.0-r0 fixes 36 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, CVE-2026-39820, CVE-2026-25679...

CLEANSTART-2026-YF59488 Security fixes in external-secrets 2.3.0-r1

Package external-secrets version 2.3.0-r1 fixes 7 vulnerabilities: CVE-2026-32952, CVE-2026-29181, CVE-2026-2303, ghsa-pjcq-xvwq-hhpj, ghsa-mh2q-q3fh-2475...

CLEANSTART-2026-ZW95372 Security fixes in kubernetes-csi-external-snapshotter-fips 8.5.0-r2

Package kubernetes-csi-external-snapshotter-fips version 8.5.0-r2 fixes 8 vulnerabilities: CVE-2026-27143, CVE-2026-32281, CVE-2026-32280, CVE-2026-27140, CVE-2026-32283...

CLEANSTART-2026-YC42491 Security fixes in external-secrets 2.2.0-r0

Package external-secrets version 2.2.0-r0 fixes 29 vulnerabilities: CVE-2026-39820, CVE-2020-8912, CVE-2020-8911, ghsa-pjcq-xvwq-hhpj, ghsa-78h2-9frx-2jm8...

CLEANSTART-2026-YP94336 Security fixes in external-secrets-operator 2.4.1-r0

Package external-secrets-operator version 2.4.1-r0 fixes 3 vulnerabilities: CVE-2026-32952, ghsa-pjcq-xvwq-hhpj, ghsa-mh2q-q3fh-2475...

CLEANSTART-2026-XZ36396 Security fixes in external-secrets-fips 0.20.4-r3

Package external-secrets-fips version 0.20.4-r3 fixes 2 vulnerabilities: CVE-2026-1229, ghsa-q9hv-hpm4-hj6x...

CLEANSTART-2026-QE69630 Security fixes in kubernetes-csi-external-snapshotter-fips 8.5.0-r0

Package kubernetes-csi-external-snapshotter-fips version 8.5.0-r0 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142...

CLEANSTART-2026-XZ40260 Security fixes in external-secrets-operator 2.5.0-r0

Package external-secrets-operator version 2.5.0-r0 fixes 2 vulnerabilities: CVE-2026-39883, ghsa-hfvc-g4fc-pqhx...

CLEANSTART-2026-PQ77493 Security fixes in kubernetes-csi-external-provisioner-fips 6.1.0-r4

Package kubernetes-csi-external-provisioner-fips version 6.1.0-r4 fixes 32 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811...

CLEANSTART-2026-CC95374 Security fixes in kubernetes-csi-external-provisioner-fips 6.2.0-r1

Package kubernetes-csi-external-provisioner-fips version 6.2.0-r1 fixes 8 vulnerabilities: CVE-2026-39883, CVE-2026-32282, CVE-2026-32281, CVE-2026-32288, CVE-2026-32289...

CLEANSTART-2026-GW32082 Security fixes in external-dns 0.21.0-r0

Package external-dns version 0.21.0-r0 fixes 3 vulnerabilities: ghsa-x4mj-7f9g-29h4, CVE-2026-41246, CVE-2026-33814...

CLEANSTART-2026-PQ72835 Security fixes in external-secrets-fips 0.17.0-r1

Package external-secrets-fips version 0.17.0-r1 fixes 5 vulnerabilities: CVE-2025-47913, CVE-2020-8911, CVE-2025-47914, CVE-2025-58181, CVE-2020-8912...