CLEANSTART-2026-MY88598 Security fixes in local-static-provisioner 2.8.0-r0

Package local-static-provisioner version 2.8.0-r0 fixes 10 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61731, CVE-2025-68119, CVE-2025-61730...

CLEANSTART-2026-WI97391 Security fixes in opensearch-k8s-operator-fips 2.7.0-r8

Package opensearch-k8s-operator-fips version 2.7.0-r8 fixes 23 vulnerabilities: CVE-2026-25679, CVE-2025-61726, CVE-2025-61725, CVE-2025-61723, CVE-2026-27142...

CLEANSTART-2026-KC30939 Security fixes in argo-workflows-fips 3.7.8-r2

Package argo-workflows-fips version 3.7.8-r2 fixes 7 vulnerabilities: ghsa-fw7p-63qq-7hpr, ghsa-q9hv-hpm4-hj6x, ghsa-9h8m-3fm2-qjrq, CVE-2026-26958, CVE-2026-1229...

CLEANSTART-2026-EC14979 Security fixes in argo-workflows 3.7.10-r0

Package argo-workflows version 3.7.10-r0 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...

CLEANSTART-2026-IE12659 Security fixes in logstash-fips 9.2.6-r0

Package logstash-fips version 9.2.6-r0 fixes 12 vulnerabilities: ghsa-mxw3-3hh2-x2mh, ghsa-whrj-4476-wvmp, ghsa-2xgq-q749-89fq, CVE-2025-14762, CVE-2026-22860...

CLEANSTART-2026-XX23863 Security fixes in istio 1.27.1-r0

Package istio version 1.27.1-r0 fixes 4 vulnerabilities: ghsa-2464-8j7c-4cjm, ghsa-p436-gjf2-799p, CVE-2025-11065, CVE-2025-15558...

CLEANSTART-2026-SE45119 Security fixes in argo-workflows 3.6.18-r0

Package argo-workflows version 3.6.18-r0 fixes 2 vulnerabilities: ghsa-37cx-329c-33x3, CVE-2026-25934...

CVE-2026-44100 JupiCore charging point reconfiguration without auth

The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service and files tampering...

CVE-2026-44100

The CVE-2026-44100 entry concerns the CHARX JupiCore service, described as allowing an unauthenticated remote attacker to reconfigure charging points. According to the sources, this can lead to disclosure of charging point UIDs, Denial-of-Service, and files tampering. The connected documents prov...

EUVD-2026-51035

The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service and files tampering...

CVE-2026-44100

The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service and files tampering...

CVE-2026-44100 JupiCore charging point reconfiguration without auth

The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service and files tampering...

CSL 1010 M2M 3G WiFi Module 2.2.1.4 (Router.cfg) Weak XOR Encryption

Summary The CSL 1010 M2M 3G WiFi Module is a portable 3G/LTE router that stores its configuration in a backup file Router.cfg. Description The device protects its configuration file Router.cfg with a weak/insecure obfuscation single-byte XOR cipher using a static key 0xEC instead of real...

PT-2026-66428

The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service and files tampering...

PT-2026-66536

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.8.4 Description Broken access control issues in the file handling API allow unauthorized access to user files, breaking tenant isolation in multi-user deployments. The endpoint '/api/v1/files/images/fl...

phantom-frida v17.16.4-20260726-run33.1

phantom-frida phantom-frida builds Android Frida Server and Gadget from source while changing a targeted set of observable runtime identifiers. It is a builder and verification harness, not a promise that every application-specific detection method is defeated. The current compatibility target is...

CVE-2026-64380

A flaw was found in the Linux kernel's Server Message Block SMB client. The vulnerability exists in the posixinfosidsize function, which is responsible for parsing POSIX Security Identifiers SIDs. An insufficient boundary check allows the system to accept truncated POSIX SIDs, which could lead to...

CVE-2026-16543

Kong Operator's embedded Kong Kubernetes Ingress Controller KIC allows a user with namespace-scoped Secret creation privileges to cause a cluster-wide ingress configuration denial of service. The embedded KIC collects CA-certificate Secrets across all watched namespaces using a label selector...

CVE-2026-41701

A flaw was found in Spring AMQP. The system generates predictable correlation identifiers IDs for message replies due to an internal simple counter. This predictability could allow an attacker to potentially infer or manipulate message flows, leading to a low impact on the confidentiality and...

CVE-2026-65884 Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2

Joomla Extension - balbooa.com - Privilege Escalation in Gridbox 2.20.2 - The registration method allows users provided usergroup IDs, allowing unauthenticated actors to register new accounts with administrative permissions...