CLEANSTART-2026-BL34124 Security fixes in strimzi-kafka-operator 0.46.1-r4

Package strimzi-kafka-operator version 0.46.1-r4 fixes 1 vulnerabilities: CVE-2025-58057...

CLEANSTART-2026-MU34721 Security fixes in minio-operator 6.0.4-r2

Package minio-operator version 6.0.4-r2 fixes 4 vulnerabilities: ghsa-mh63-6h87-95cp, ghsa-29wx-vh33-7x7r, CVE-2025-30204, CVE-2024-51744...

CLEANSTART-2026-JU04102 Security fixes in tigera-operator-fips 1.37.2-r0

Package tigera-operator-fips version 1.37.2-r0 fixes 2 vulnerabilities: ghsa-6v2p-p543-phr9, ghsa-mf24-chxh-hmvj...

CLEANSTART-2026-TB08194 Security fixes in opensearch-k8s-operator-fips 2.5.1-r3

Package opensearch-k8s-operator-fips version 2.5.1-r3 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...

CLEANSTART-2026-PD63045 Security fixes in percona-xtradb-cluster-operator-fips 1.19.0-r2

Package percona-xtradb-cluster-operator-fips version 1.19.0-r2 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...

CLEANSTART-2026-AM71470 Security fixes in jaeger-operator 1.65.0-r0

Package jaeger-operator version 1.65.0-r0 fixes 1 vulnerabilities: CVE-2026-24051...

CLEANSTART-2026-PY14221 Security fixes in prometheus-operator 0.89.0-r0

Package prometheus-operator version 0.89.0-r0 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142...

CLEANSTART-2026-JD71154 Security fixes in victoriametrics-operator-fips 0.65.0-r2

Package victoriametrics-operator-fips version 0.65.0-r2 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, ghsa-9h8m-3fm2-qjrq, CVE-2026-27139...

CLEANSTART-2026-NF39529 Security fixes in k8ssandra-operator-fips 1.27.0-r0

Package k8ssandra-operator-fips version 1.27.0-r0 fixes 2 vulnerabilities: CVE-2025-61729, CVE-2025-61727...

CLEANSTART-2026-EZ87718 Security fixes in percona-xtradb-cluster-operator-fips 1.18.0-r1

Package percona-xtradb-cluster-operator-fips version 1.18.0-r1 fixes 8 vulnerabilities: CVE-2025-61726, CVE-2025-61730, CVE-2025-68121, CVE-2025-61728, CVE-2025-68119...

CLEANSTART-2026-WW94113 Security fixes in spark-operator 2.1.1-r3

Package spark-operator version 2.1.1-r3 fixes 4 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730...

CLEANSTART-2026-BN98240 Security fixes in fluent-operator-fips 3.3.0-r7

Package fluent-operator-fips version 3.3.0-r7 fixes 4 vulnerabilities: CVE-2026-27139, CVE-2025-61730, CVE-2026-27142, CVE-2025-61728...

CLEANSTART-2026-XI30984 Security fixes in zookeeper-operator 0.2.15-r1

Package zookeeper-operator version 0.2.15-r1 fixes 3 vulnerabilities: CVE-2023-44487, CVE-2023-39325, CVE-2024-24786...

EUVD-2026-51032

A low-privileged remote attacker with "operator" access can upload arbitrary files via the REST endpoint intended for firmware updates, resulting in persistent storage of attacker-controlled files and potentially exhausting resources, which might lead to Denial-of-Service...

CVE-2026-44097 File Upload vulnerability

A low-privileged remote attacker with "operator" access can upload arbitrary files via the REST endpoint intended for firmware updates, resulting in persistent storage of attacker-controlled files and potentially exhausting resources, which might lead to Denial-of-Service...

CVE-2026-44097 File Upload vulnerability

A low-privileged remote attacker with "operator" access can upload arbitrary files via the REST endpoint intended for firmware updates, resulting in persistent storage of attacker-controlled files and potentially exhausting resources, which might lead to Denial-of-Service...

CVE-2026-44097

A low-privileged remote attacker with "operator" access can upload arbitrary files via the REST endpoint intended for firmware updates, resulting in persistent storage of attacker-controlled files and potentially exhausting resources, which might lead to Denial-of-Service...

CVE-2026-44097

The CVE-2026-44097 entry describes a low-privileged remote attacker with operator access who can upload arbitrary files through the firmware-update REST endpoint, leading to persistent attacker-controlled data and potential DoS via resource exhaustion. The root cause is an unrestricted file uploa...

CVE-2026-14923

The Sync Post With Other Site WordPress plugin before 1.9.3 does not correctly enforce the page-editing capability on a REST route that creates and updates posts, because of an operator-precedence flaw in its authorization check. An authenticated user holding only the post-editing capability such...

CVE-2026-15240

The Customer Switching WordPress plugin before 2.1.3 does not securely bind an active user-switching session to the operator who initiated it, allowing a lower-privileged account that an operator is currently switched into to be resolved as that operator and to switch into any permitted account,...