EUVD-2026-59132

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb realloc The pskbmaypull called by batadvblaisbackbonegw could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...

VulnCheck KEV: CVE-2016-5312

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. dot dot in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream...

CVE-2026-19188 Haiwell IoT Cloud HMI Gateway OS Command Injection

A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net Check feature accessible via the /setting endpoint. The cmdPing Socket.io event fails to properly sanitize user-supplied input before passing it to t...

CVE-2026-19188

A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net Check feature accessible via the /setting endpoint. The cmdPing Socket.io event fails to properly sanitize user-supplied input before passing it to t...

CVE-2026-19188

CVE-2026-19188 affects the Haiwell IoT Cloud HMI Gateway. The vulnerability is an OS command injection in the Net Check feature accessed via the /setting endpoint, where the cmdPing Socket.io event does not properly sanitize user input, allowing an attacker to inject and execute arbitrary OS comm...

GO-2025-3418 vulnerabilities

Vulnerabilities for packages: envoy-gateway...

GO-2026-4771 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, gitlab-elasticsearch-indexer-fips, vault, gitaly, teleport, vault-fips, commercial-grafana, gitlab-elasticsearch-indexer...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, k3s, kine, commercial-expanso-edge, envoy-gateway, kots, commercial-chainloop-backend, commercial-grafana, spire-server...

GO-2025-3942 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache-fips, juicefs, eks-distro, k8sgateway-fips, cloudflared, cloudflared-fips, eks-distro-fips, kubernetes-dns-node-cache, k8sgateway...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: tigera-operator, xeol-fips, vcluster-fips, gatekeeper, ratify-fips, helm-exporter, tigera-operator-fips, maru, steampipe, cloudbeat, ocm-kubernetes-controller-fips, kubescape-server, cluster-api-helm-controller-fips, k9s, consul-k8s, helm-mapkubeapis, oras, kube-mgmt...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, portieris, argocd-image-updater, gitlab-rails-ce-fips, envoy-gateway, gitlab-rails-ce, portieris-fips, kots, gitness, argocd-image-updater-fips, zot...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, portieris, argocd-image-updater, gitlab-rails-ce-fips, envoy-gateway, gitlab-rails-ce, portieris-fips, kots, gitness, argocd-image-updater-fips, zot...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: terragrunt, gitleaks, nsc, opentofu, gitness, undock, zarf, podman, zot, terraform, gptscript, trivy-operator, trufflehog, vcluster, steampipe, rancher-fleet, filebrowser, grafana-alloy, k9s, trivy, tflint, kubescape-operator, envoy-gateway, guac, xeol, nuclei...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: kine, spire-server, k3s, envoy-gateway, kots...

GO-2025-3418 vulnerabilities

Vulnerabilities for packages: envoy-gateway...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: helm-operator, k8ssandra-client, helm-push, zarf, istio, zot, cerbos, rancher-fleet, k8sgpt, cert-manager-cmctl, linkerd2, rancher-helm, k9s, kots, trivy, cilium-cli, helm-docs, eksctl, tw, flux-helm-controller, kargo, chartmuseum, pluto, cluster-api-helm-controller,...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, portieris, envoy-gateway, gitness, zot, kots...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, portieris, envoy-gateway, gitness, zot, kots...

WordPress Payment Gateway for PayPal on WooCommerce plugin < 9.2.1 - Unauthenticated Payment Bypass via PayPal Advanced Return Handler vulnerability

Unauthenticated Payment Bypass via PayPal Advanced Return Handler vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Payment Gateway for PayPal on WooCommerce versions 9.2.1...

CVE-2026-73842

OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.3, 1.1.3, and 1.2.0-rc.2, internal/cluster-gateway/server.go exposed /api/proxy/, /api/exec/, and /api/wirelogs/ on an internal listener without requiring a client certificate or token, allowing any...