1165991 matches found
Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent
Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docker daemons to deploy an open-source artificial intelligence AI agent framework called Hermes Agent. "The implant installs the framework unchanged, then overwrites its SOUL.md...
Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.20.1
cert-manager Operator for Red Hat OpenShift 1.20.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...
Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.20.1
cert-manager Operator for Red Hat OpenShift 1.20.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...
Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.20.1
cert-manager Operator for Red Hat OpenShift 1.20.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...
CVE-2026-12269
Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI...
CVE-2026-12269
Zohocorp ManageEngine DDI Central version 6.2.0 (builds below 6201) is vulnerable to a Keepalived configuration injection vulnerability within the HA configuration workflow. An authenticated operator-level user can exploit this flaw to modify the Keepalived configuration, potentially leading to R...
CVE-2026-12269 Authenticated File Write to RCE via keepalived in DDI Central
Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI...
EUVD-2026-88209
Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI...
CVE-2026-12269 Authenticated File Write to RCE via keepalived in DDI Central
Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI...
Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.20.1
cert-manager Operator for Red Hat OpenShift 1.20.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...
Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.20.1
cert-manager Operator for Red Hat OpenShift 1.20.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...
Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.20.1
cert-manager Operator for Red Hat OpenShift 1.20.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...
An Operator-Norm Approach to Security with Quantum Advice
Non-uniform security allows an adversary to receive bounded advice about an oracle before attempting a fresh challenge. This captures the most realistic attacks and has already been studied extensively in prior work. In this work, we introduce an operator-norm approach for non-uniform security in...
RHEL 8 : postgresql:12 (RHSA-2026:72363)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72363 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...
WS-2026-0082
OpenBao before 2.6.3 / 2.7.0-beta allowed a privileged operator to achieve remote code execution through the sys/storage/raft/snapshot-force endpoint: force-restoring a crafted Raft snapshot could replace plugin catalog entries, and OpenBao then executed the attacker-chosen plugin binary without...
PT-2026-99843
Name of the Vulnerable Software and Affected Versions ManageEngine DDI Central versions prior to 6.2.0 build 6201 Description A configuration injection flaw exists in the High Availability HA configuration workflow. This issue allows an authenticated user with operator-level privileges to modify...
CVE-2026-85644: Access of Resource Using Incompatible Type
XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference. The wrapper function XS::Parse::Infix generates for a list-associative infix operator checks whether arguments are array references, but it tests using SvRV rather than SvROK. SvRV reads a union slot...
RHEL 9 : postgresql (RHSA-2026:72361)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72361 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...
RHEL 7 : gstreamer1-plugins-good (RHSA-2026:72367)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:72367 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...
RHEL 10 : pcp (RHSA-2026:72273)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72273 advisory. Performance Co-Pilot PCP is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance...