CLEANSTART-2026-QB06725 Security fixes in prometheus-operator 0.91.0-r1

Package prometheus-operator version 0.91.0-r1 fixes 3 vulnerabilities: CVE-2026-42504, CVE-2026-42507, CVE-2026-27145...

CLEANSTART-2026-AG74269 Security fixes in cert-manager-fips 1.17.4-r1

Package cert-manager-fips version 1.17.4-r1 fixes 24 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3, CVE-2026-24051, CVE-2026-39883, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-HR76710 Security fixes in eks-distro-kube-scheduler-fips 1.34.3-r0

Package eks-distro-kube-scheduler-fips version 1.34.3-r0 fixes 18 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-27140, CVE-2026-32280...

CLEANSTART-2026-WI97391 Security fixes in opensearch-k8s-operator-fips 2.7.0-r8

Package opensearch-k8s-operator-fips version 2.7.0-r8 fixes 23 vulnerabilities: CVE-2026-25679, CVE-2025-61726, CVE-2025-61725, CVE-2025-61723, CVE-2026-27142...

CLEANSTART-2026-YQ29053 Security fixes in rundeck 6.0.0-r2

Package rundeck version 6.0.0-r2 fixes 10 vulnerabilities: CVE-2026-49844, CVE-2026-59889, CVE-2026-59888, CVE-2026-54518, CVE-2026-54517...

CLEANSTART-2026-TH89970 Security fixes in openjdk8 8.242.08-r0

Package openjdk8 version 8.242.08-r0 fixes 7 vulnerabilities: CVE-2020-2583, CVE-2020-2590, CVE-2020-2593, CVE-2020-2601, CVE-2020-2604...

CLEANSTART-2026-WE49959 Security fixes in ollama 0.30.10-r0

Package ollama version 0.30.10-r0 fixes 6 vulnerabilities: CVE-2026-46595, CVE-2026-42508, CVE-2026-39821, CVE-2026-25680, CVE-2026-33813...

CLEANSTART-2026-HY96164 Security fixes in kubernetes-event-exporter-fips 1.7-r0

Package kubernetes-event-exporter-fips version 1.7-r0 fixes 46 vulnerabilities: ghsa-wf45-q9ch-q8gh, ghsa-p77j-4mvh-x3m3, ghsa-gxhx-2686-5h9g, CVE-2026-41602, CVE-2026-33186...

CLEANSTART-2026-MN62848 Security fixes in jitsucom-bulker 2.10.0-r2

Package jitsucom-bulker version 2.10.0-r2 fixes 19 vulnerabilities: ghsa-9jj7-4m8r-rfcm, CVE-2026-33815, CVE-2026-33816, ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx...

CLEANSTART-2026-FG71338 Security fixes in opentofu-fips 1.8.11-r5

Package opentofu-fips version 1.8.11-r5 fixes 9 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...

CLEANSTART-2026-XX23863 Security fixes in istio 1.27.1-r0

Package istio version 1.27.1-r0 fixes 4 vulnerabilities: ghsa-2464-8j7c-4cjm, ghsa-p436-gjf2-799p, CVE-2025-11065, CVE-2025-15558...

CLEANSTART-2026-UV81951 Security fixes in k8ssandra-client-fips 0.8.8-r0

Package k8ssandra-client-fips version 0.8.8-r0 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-II62284 Security fixes in k8ssandra-operator-fips 1.29.0-r1

Package k8ssandra-operator-fips version 1.29.0-r1 fixes 34 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186, CVE-2026-25679, CVE-2026-39820, CVE-2025-61726...

CLEANSTART-2026-OD16779 Security fixes in apache-nifi 2.9.0-r3

Package apache-nifi version 2.9.0-r3 fixes 55 vulnerabilities: CVE-2024-45993, CVE-2025-31344, CVE-2025-67721, CVE-2025-8671, CVE-2026-10532...

CVE-2026-44100 JupiCore charging point reconfiguration without auth

The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service and files tampering...

CVE-2026-44100

The CVE-2026-44100 entry concerns the CHARX JupiCore service, described as allowing an unauthenticated remote attacker to reconfigure charging points. According to the sources, this can lead to disclosure of charging point UIDs, Denial-of-Service, and files tampering. The connected documents prov...

CVE-2026-44100

The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service and files tampering...

EUVD-2026-51035

The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service and files tampering...

PT-2026-66536

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.8.4 Description Broken access control issues in the file handling API allow unauthorized access to user files, breaking tenant isolation in multi-user deployments. The endpoint '/api/v1/files/images/fl...

CSL 1010 M2M 3G WiFi Module 2.2.1.4 (Router.cfg) Weak XOR Encryption

Summary The CSL 1010 M2M 3G WiFi Module is a portable 3G/LTE router that stores its configuration in a backup file Router.cfg. Description The device protects its configuration file Router.cfg with a weak/insecure obfuscation single-byte XOR cipher using a static key 0xEC instead of real...