CVE-2026-71308: Authorization Bypass Through User-Controlled Key

Lemur manages TLS certificate creation. From 0.5.0 until 1.9.3, certificate create, upload, and edit requests accepted replaces or replacements identifiers that AssociatedCertificateSchema resolved with fetchobjects without a CertificatePermission check. Assigning those objects to...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: gitlab-operator, zarf, helm-diff-fips, kuma, flux-fips, cilium-cli, flux, flux-source-controller, rancher-fleet, rancher-fleet-fips, zarf-fips, cert-manager-cmctl-fips, cert-manager-cmctl, helm-diff, kots, flux-source-controller-fips, helm-push, gitlab-operator-fips...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: gitlab-operator, zarf, helm-diff-fips, kuma, flux-fips, cilium-cli, flux, flux-source-controller, rancher-fleet, rancher-fleet-fips, zarf-fips, cert-manager-cmctl-fips, cert-manager-cmctl, helm-diff, kots, flux-source-controller-fips, helm-push, gitlab-operator-fips...

GO-2026-4316 vulnerabilities

Vulnerabilities for packages: commercial-kyverno, aws-lambda-runtime-interface-emulator-fips, custom-pod-autoscaler, fleet-server-fips, custom-pod-autoscaler-fips, kyverno-fips, cloudbeat, aws-lambda-runtime-interface-emulator, cloudbeat-fips...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: tigera-operator, jfrog-cli, kyverno-notation-aws-fips, tigera-operator-fips, consul-k8s, helm-exporter, cert-manager-cmctl, kyverno-notation-aws, rancher-fleet, gogatekeeper, kube-mgmt-fips, crossplane-fips, commercial-kyverno, envoy-gateway, falcoctl-fips,...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: nuclei, nsc, undock, trivy-operator, terragrunt, vcluster, kubescape-operator, zarf, filebrowser, opentofu, zot, gitleaks, gitness, grafana-alloy, gptscript, terraform, guac, steampipe, trufflehog, trivy, podman, rancher-fleet, k9s, envoy-gateway, tflint, xeol...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: kots, flux, rancher-fleet, cilium-cli, cert-manager-cmctl, flux-source-controller, zarf, helm-push, kuma...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: kots, flux, rancher-fleet, cilium-cli, cert-manager-cmctl, flux-source-controller, zarf, helm-push, kuma...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: pluto, cilium-cli, tw, flux-source-controller, eksctl, rancher-helm, helm-docs, kots, istio, cert-manager-cmctl, zarf, zot, k8ssandra-client, helm-operator, cluster-api-helm-controller, helm-push, k8sgpt, linkerd2, trivy, chart-testing, rancher-fleet, chartmuseum, k9...

GO-2026-5490 vulnerabilities

Vulnerabilities for packages: flux, rancher-fleet, terragrunt, external-secrets-operator, argo-cd, telegraf, scorecard, teleport, cerbos, rclone, kyverno, gitaly, syft...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, flux-image-automation-controller, nfpm, nuclei, argocd-image-updater, flux-source-controller, pulumi-language-java, witness, osv-scanner, gomplate, src-fingerprint, syft, kots, flux, gitsign, bom, pulumi, trivy-operator,...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: rancher-fleet, terragrunt, external-secrets-operator, argo-cd, scorecard, teleport, cerbos, rclone, kyverno, gitaly, syft...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: opa-envoy, crossplane-provider-aws-rds, db-operator, delve, argocd-image-updater, crossplane-provider-aws-s3, crossplane-provider-aws-kinesis, ksops, crossplane-provider-aws-sns, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, src-fingerprint,...

Incorrect Authorization

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Incorrect Authorization in the Fleet. An attacker can gain unauthorized access to manage integration policies for different...

Incorrect Authorization

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Incorrect Authorization via the Fleet proxy configuration. An attacker can access sensitive proxy authentication credentials and...

Relative Path Traversal

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Relative Path Traversal in the process that handles user-supplied identifiers for Fleet Server host configurations, which fails to...

CVE-2026-72676

Improper Control of Generation of Code 'Code Injection' CWE-94 in Fleet Server can lead to the execution of attacker-supplied script content via Code Injection CAPEC-242. Kibana accepted an identifier for an output configuration without restricting it to safe characters. That identifier is later...

CVE-2026-72677

Relative Path Traversal CWE-23 in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal CAPEC-139. Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored...

CVE-2026-72670

A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a configured Fleet proxy. This would normally require the Fleet privilege to read settings.The proxy configuration possibly contains proxy authentication credentials and private key...

CVE-2026-72657

Authorization Bypass Through User-Controlled Key CWE-639 in Fleet Server can lead to information disclosure via Manipulating User-Controlled Variables CAPEC-77. The authorization decision for artifact downloads relied on a client-supplied value that was persisted without being validated against t...