CVE-2026-76172 vulnerabilities

Vulnerabilities for packages: langfuse, opensearch-dashboards-fips, argo-workflows, unleash, keep, arangodb, commercial-gitlab-rails-ee-fips, gitlab-rails-ce, tileserver-gl-fips, kibana, vitess, prism, jupyter-base-notebook, opensearch-dashboards, wazuh-dashboard-fips, keep-fips, langfuse-fips,...

CVE-2026-82562 vulnerabilities

Vulnerabilities for packages: langfuse, opensearch-dashboards-fips, argo-workflows, unleash, renovate, arangodb, commercial-gitlab-rails-ee-fips, pelias-api, azurite, gitlab-rails-ce, tileserver-gl-fips, kibana, kubeflow-centraldashboard, redisinsight, prism, opensearch-dashboards,...

FIPS mode assertion failure via malicious CERT payload

...

CVE-2026-43871 vulnerabilities

Vulnerabilities for packages: seaweedfs-fips, minio-fips, zipkin, jaeger, nri-cassandra, grafana-geomys-fips, tempo-fips, apm-server-fips, nri-cassandra-fips, minio, nri-kafka-fips, tempo, datadog-agent-fips, seaweedfs-rocksdb-fips, solr, bento, telegraf, temporal-fips, jaeger-fips, bento-fips,...

GHSA-8WV5-X4W7-5GWW vulnerabilities

Vulnerabilities for packages: seaweedfs-fips, minio-fips, zipkin, jaeger, nri-cassandra, grafana-geomys-fips, tempo-fips, apm-server-fips, nri-cassandra-fips, minio, nri-kafka-fips, tempo, datadog-agent-fips, seaweedfs-rocksdb-fips, solr, bento, telegraf, temporal-fips, jaeger-fips, bento-fips,...

GHSA-VP52-PCJ8-J9QC vulnerabilities

Vulnerabilities for packages: kube-vip, jobset-fips, eck-operator-fips, grafana-rollout-operator, kcp, crossplane-provider-aws-elbv2, keda-fips, crossplane-provider-aws-ses-fips, envoy-gateway, hubble-ui-backend-fips, crossplane-provider-aws-rum, crossplane-provider-aws-timestreamwrite-fips,...

CVE-2026-84304 vulnerabilities

Vulnerabilities for packages: kube-vip, jobset-fips, eck-operator-fips, grafana-rollout-operator, kcp, crossplane-provider-aws-elbv2, keda-fips, crossplane-provider-aws-ses-fips, envoy-gateway, hubble-ui-backend-fips, crossplane-provider-aws-rum, crossplane-provider-aws-timestreamwrite-fips,...

AZL-98441 CVE-2026-14957 affecting package libreswan for versions less than 4.15-3

In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...

CVE-2026-14957

In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...

EUVD-2026-69820

In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...

CVE-2026-14957

CVE-2026-14957 is a denial-of-service vulnerability in Libreswan (an IPsec/IKE implementation for Linux). In FIPS mode , the add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts the result is non-NULL. When public key extraction fails (e.g., RSA exponent set to 0), the assertion ...

CVE-2026-14957 FIPS mode assertion failure via malicious CERT payload

In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...

CVE-2026-14957 FIPS mode assertion failure via malicious CERT payload

In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...

CVE-2026-14957

In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...

CVE-2026-14957

In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...

GO-2026-6225 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, knative-serving-fips, crossplane-fips, tekton-pipelines, security-profiles-operator, knative-serving, crossplane, tekton-pipelines-fips...

GHSA-5CC2-282F-JJQ2 vulnerabilities

Vulnerabilities for packages: mlrun-fips, keep-fips, airflow, datadog-agent-fips, keep, datadog-agent, mlrun...

CVE-2026-15925 vulnerabilities

Vulnerabilities for packages: mlrun-fips, keep-fips, airflow, datadog-agent-fips, keep, datadog-agent, mlrun...

Oracle Linux 9 : openssl-fips-provider (ELSA-2026-27744)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-27744 advisory. 3.0.7-11.0.1 - Drop OpenELA branding Orabug: 37274593 - Add bundle with Oracle Linux 9 OpenSSL FIPS module packages Orabug: 39910507 - Update extract-src.sh...

Oracle Linux 9 : ELSA-2026-60304-0: / golang (ELSA-2026-603040)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-603040 advisory. 1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.7-1 - Update to Go 1.26.7 fips-1 - Resolves: RHEL-246425 1.26.5-2 - Update t...