CVE-2026-93991 Argo Workflows 4.1.0 through 4.1.3 Cross-Namespace Disclosure via Negated Selector

Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals operator. Attackers with namespace-scoped list permissions can use a...

CVE-2026-93991

Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals operator. Attackers with namespace-scoped list permissions can use a...

CVE-2026-93991 Argo Workflows 4.1.0 through 4.1.3 Cross-Namespace Disclosure via Negated Selector

Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals operator. Attackers with namespace-scoped list permissions can use a...

xalgorix v4.6.78

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

Exploit for CVE-2026-93659

CVE-2026-93659: Stored XSS in Concrete CMS Community Store Lea...

GHSA-M37J-52J7-PJW7 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kube-arangodb, k9s, helm-set-status, kyverno-notation-aws, tigera-operator, rancher-helm, gitness, maru, cert-manager-cmctl, flux-helm-controller, k8sgpt, helm-push, opentofu, helm-mapkubeapis, kargo, xeol, manifest-tool...

CVE-2026-85731 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kube-arangodb, k9s, helm-set-status, kyverno-notation-aws, tigera-operator, rancher-helm, gitness, maru, cert-manager-cmctl, flux-helm-controller, k8sgpt, helm-push, opentofu, helm-mapkubeapis, kargo, xeol, manifest-tool...

CVE-2026-1242

The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic in the permission callback in all versions up to, and including, 4.2.6 due to the use of an AND && operator instead of an OR || operator. This makes it possible for authenticated attackers, with...

CVE-2026-1242 BlockSpare - Gutenberg Site Builder Blocks & Starter Sites <= 4.2.6 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Post Creation

The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic in the permission callback in all versions up to, and including, 4.2.6 due to the use of an AND && operator instead of an OR || operator. This makes it possible for authenticated attackers, with...

EUVD-2026-83541

The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic in the permission callback in all versions up to, and including, 4.2.6 due to the use of an AND && operator instead of an OR || operator. This makes it possible for authenticated attackers, with...

CVE-2026-1242 BlockSpare - Gutenberg Site Builder Blocks & Starter Sites <= 4.2.6 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Post Creation

The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic in the permission callback in all versions up to, and including, 4.2.6 due to the use of an AND && operator instead of an OR || operator. This makes it possible for authenticated attackers, with...

CVE-2026-1242

The BlockSpare plugin for WordPress (Gutenberg Site Builder Blocks & Starter Sites) is vulnerable to authorization bypass in all versions up to and including 4.2.6 . The root cause is a logic error in the permission callback where an AND (&&) operator was used instead of an OR (||) operator, allo...

CVE-2026-81871 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, mcp-grafana, tempo-fips, datadog-agent, envoy-ai-gateway-fips, grafana-geomys-fips, dynatrace-operator, frankenphp-8.5, fluent-bit-plugin-loki, grafana-mimir, grafana-pyroscope, opentelemetry-go-instrumentation-fips, pulumi-kubernetes-operator,...

GHSA-W34Q-CM8F-9C5X vulnerabilities

Vulnerabilities for packages: aws-otel-collector, mcp-grafana, tempo-fips, datadog-agent, envoy-ai-gateway-fips, grafana-geomys-fips, dynatrace-operator, frankenphp-8.5, fluent-bit-plugin-loki, grafana-mimir, grafana-pyroscope, opentelemetry-go-instrumentation-fips, pulumi-kubernetes-operator,...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock — OPPO Find X5 Pro PFEM10 English · 中文READ...

GHSA-H7VF-4X9W-H99V vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kube-arangodb, k9s, helm-set-status, kyverno-notation-aws, tigera-operator, rancher-helm, gitness, maru, cert-manager-cmctl, flux-helm-controller, k8sgpt, helm-push, opentofu, helm-mapkubeapis, kargo, xeol, manifest-tool...

CVE-2026-85732 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kube-arangodb, k9s, helm-set-status, kyverno-notation-aws, tigera-operator, rancher-helm, gitness, maru, cert-manager-cmctl, flux-helm-controller, k8sgpt, helm-push, opentofu, helm-mapkubeapis, kargo, xeol, manifest-tool...

CVE-2026-81871 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, fluent-bit-plugin-loki, grafana-mimir, harbor-registry, kots, tempo, traefik, grafana, mcp-grafana, falcosidekick, datadog-agent, loki, distribution, grafana-alloy, opentofu, pulumi-kubernetes-operator, zot, aws-otel-collector, caddy,...

GHSA-W34Q-CM8F-9C5X vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, fluent-bit-plugin-loki, grafana-mimir, harbor-registry, kots, tempo, traefik, grafana, mcp-grafana, falcosidekick, datadog-agent, loki, distribution, grafana-alloy, opentofu, pulumi-kubernetes-operator, zot, aws-otel-collector, caddy,...

CVE-2026-81870 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, nuclei, rancher, cluster-autoscaler, promxy, dgraph, kubernetes-csi-driver-nfs, rancher-webhook, harbor-registry, sigstore-scaffolding, octo-sts, kpt, kserve-modelmesh-serving, witness, prometheus-adapter, headlamp, knative-eventing,...