CVE-2026-56121_exploit

CVE-2026-56121 — RCE no autenticado en Feast Registry dill.loads Ejecución remota de código no autenticada en el servidor gRPC del registro del feature store Feast. La RPC ApplyFeatureView reconstruye un OnDemandFeatureView a partir del proto de la solicitud. Al hacerlo, decodifica en base64...

CLEANSTART-2026-RD18147 gRPC-Go is the Go language implementation of gRPC

CVE-2026-33186 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

ROOT-APP-GOBINARY-CVE-2026-84445 CVE-2026-84445 in google.golang.org/grpc - Patched by Root

Root has patched CVE-2026-84445 in the google.golang.org/grpc package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-84304 CVE-2026-84304 in google.golang.org/grpc - Patched by Root

Root has patched CVE-2026-84304 in the google.golang.org/grpc package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-GHSA-HRXH-6V49-42GF GHSA-hrxh-6v49-42gf in google.golang.org/grpc - Patched by Root

Root has patched GHSA-hrxh-6v49-42gf in the google.golang.org/grpc package for Root:Go. Multiple fixed versions available...

MARMALADE-2-CVE-2025-67780-Exploit

MARMALADE 2/CVE-2025-67780 漏洞利用（PoC） 针对 Starlink 天线中 MARMALADE 2（CVE-2025-67780）漏洞的 PoC 漏洞利用代码 阅读我的完整博客，了解我是如何发现该漏洞以及如何让它按你的意愿执行：https://www.akawlabs.com/blog/starlink-grpc-execution 我开发了多个概念验证实现，证明本地网络上的 Starlink 天线可被强制重启。问题源于天线诊断接口所暴露的某些 gRPC 命令缺少充分的身份验证和白名单限制。 在向 SpaceX...

CLEANSTART-2026-DO16074 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the kube-state-metrics-fips package. gRPC-Go is the Go language implementation of gRPC...

CLEANSTART-2026-KG16393 gRPC-Go is the Go language implementation of gRPC

CVE-2026-84303 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-DV58280 gRPC-Go is the Go language implementation of gRPC

CVE-2026-84445 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-HH19217 gRPC-Go is the Go language implementation of gRPC

CVE-2026-84304 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

Rocky Linux 8 [CIQ] Security Update: osbuild-composer / osbuild-composer-core / etc Multiple Vulnerabilities (crlsa-2026_48790)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202648790 advisory. google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation CVE-2026-33186...

CLEANSTART-2026-QN15413 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the cosign package. gRPC-Go is the Go language implementation of gRPC...

CLEANSTART-2026-OA61681 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the alertmanager package. gRPC-Go is the Go language implementation of gRPC...

EUVD-2026-88476

@grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized...

@grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized

Impact When server credentials are created with the requireClientCertificate option set to false, getAuthContext does not distinguish between authorized and unauthorized certificates in its return value. This can create improper authentication vulnerabilities for @grpc/grpc-js users who use the...

GHSA-M9GG-HP2V-232J @grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized

Impact When server credentials are created with the requireClientCertificate option set to false, getAuthContext does not distinguish between authorized and unauthorized certificates in its return value. This can create improper authentication vulnerabilities for @grpc/grpc-js users who use the...

GHSA-F596-WHHP-79R4 @grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages

Impact If an application method handler crashes, the error message is included in the status message sent to the client. This can leak to the client any sensitive data that may be included in the error message. This impacts anyone using @grpc/grpc-js to run servers. Patches This vulnerability is...

@grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages

Impact If an application method handler crashes, the error message is included in the status message sent to the client. This can leak to the client any sensitive data that may be included in the error message. This impacts anyone using @grpc/grpc-js to run servers. Patches This vulnerability is...

EUVD-2026-88468

@grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages...

Important: Red Hat Security Advisory: rhc security update

An update for rhc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...