5018 matches found
PT-2026-72671
In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421: Fix shift-out-of-bounds in max3421 hub control The max3421 hub control function handles USB hub class requests to the virtual root hub. In the default branches of both the ClearPortFeature and SetPortFeature...
CVE-2026-73561
creationtimestamp| type| source ---|---|--- 2026-08-13 18:35:18+00:00| published-proof-of-concept| https://github.com/anephenix/hub/security/advisories/GHSA-g5vv-q72c-7j78...
CVE-2026-73561
Hub is a Node.js WebSocket server and client with added features. Prior to 0.2.16, every incoming unauthenticated WebSocket connection triggers loadDefaultConnectionEventListeners to call requestClientId, which calls rpc.send for the get-client-id action and pushes a request into RPC.requests. Th...
CVE-2026-73561
CVE-2026-73561 describes an unauthenticated DoS in the Hub Node.js WebSocket server. For every new WebSocket, Hub registers a listener that triggers an RPC path: get-client-id is sent via RPC, the request is stored in RPC.requests, and a polling interval (setInterval every 10 ms) checks for a mat...
CVE-2026-73561 Hub: Unauthenticated WebSocket RPC Waiter Resource Exhaustion
Hub is a Node.js WebSocket server and client with added features. Prior to 0.2.16, every incoming unauthenticated WebSocket connection triggers loadDefaultConnectionEventListeners to call requestClientId, which calls rpc.send for the get-client-id action and pushes a request into RPC.requests. Th...
CVE-2026-73561 Hub: Unauthenticated WebSocket RPC Waiter Resource Exhaustion
Hub is a Node.js WebSocket server and client with added features. Prior to 0.2.16, every incoming unauthenticated WebSocket connection triggers loadDefaultConnectionEventListeners to call requestClientId, which calls rpc.send for the get-client-id action and pushes a request into RPC.requests. Th...
CVE-2026-65582
Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...
EUVD-2026-57980
Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...
CVE-2026-65582
CVE-2026-65582 affects the WordPress AI Hub theme (versions <= 1.3.10). The available documents describe a Subscriber Arbitrary File Download vulnerability in AI Hub
CVE-2026-65582 WordPress AI Hub theme <= 1.3.10 - Arbitrary File Download vulnerability
Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...
CVE-2026-65582
Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...
Critical: Red Hat Security Advisory: Multicluster Global Hub 1.5.7 security update
Multicluster Global Hub v1.5.7 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a...
EUVD-2026-57686
A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically with patch access to the Search Custom Resource CR, could exploit a vulnerability in the Collector.ImageOverride field. This allows the attacker to deploy an arbitrary container...
PT-2026-71546
Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...
CVE-2026-71846
A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secrets get, list, and watch permissions, while the code only requires access to a single specific Secret. This excessive privilege means that a compromise of the insights-client po...
CVE-2026-71471
A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically with patch access to the Search Custom Resource CR, could exploit a vulnerability in the Collector.ImageOverride field. This allows the attacker to deploy an arbitrary container...
CVE-2026-71471 Acm-search-v2-rhel9: search-v2-operator: hub search cr collector.imageoverride propagated to every spoke as arbitrary container image
A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically with patch access to the Search Custom Resource CR, could exploit a vulnerability in the Collector.ImageOverride field. This allows the attacker to deploy an arbitrary container...
CVE-2026-71471
The CVE-2026-71471 issue affects acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster who has patch access to the Search Custom Resource can exploit the Collector.ImageOverride field to deploy an arbitrary container image across all managed clusters, enabling remote ...
CVE-2026-71471 Acm-search-v2-rhel9: search-v2-operator: hub search cr collector.imageoverride propagated to every spoke as arbitrary container image
A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically with patch access to the Search Custom Resource CR, could exploit a vulnerability in the Collector.ImageOverride field. This allows the attacker to deploy an arbitrary container...
CVE-2026-71471
A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically with patch access to the Search Custom Resource CR, could exploit a vulnerability in the Collector.ImageOverride field. This allows the attacker to deploy an arbitrary container...