Exploit for Use After Free in Linux Linux_Kernel

GhostLock — OPPO Find X5 Pro PFEM10 English · 中文READ...

GHSA-H7VF-4X9W-H99V vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, kyverno-notation-aws, xeol, flux-helm-controller, cluster-api-helm-controller, manifest-tool, helm-mapkubeapis, kargo, gitness, tigera-operator, helm-set-status, kube-arangodb, helm-push, k9s, opentofu, rancher-helm, maru, k8sgpt...

CVE-2026-85732 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, kyverno-notation-aws, xeol, flux-helm-controller, cluster-api-helm-controller, manifest-tool, helm-mapkubeapis, kargo, gitness, tigera-operator, helm-set-status, kube-arangodb, helm-push, k9s, opentofu, rancher-helm, maru, k8sgpt...

CVE-2026-81871 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, loki, grafana-alloy, falcosidekick, distribution, mcp-grafana, traefik, grafana-pyroscope, pulumi-kubernetes-operator, harbor-registry, grafana-mimir, kots, grafana, opentofu, fluent-bit-plugin-loki, tempo, caddy, amazon-cloudwatch-agent,...

GHSA-W34Q-CM8F-9C5X vulnerabilities

Vulnerabilities for packages: aws-otel-collector, loki, grafana-alloy, falcosidekick, distribution, mcp-grafana, traefik, grafana-pyroscope, pulumi-kubernetes-operator, harbor-registry, grafana-mimir, kots, grafana, opentofu, fluent-bit-plugin-loki, tempo, caddy, amazon-cloudwatch-agent,...

CVE-2026-81870 vulnerabilities

Vulnerabilities for packages: kuma, step-ca, containerd, bank-vaults, cluster-autoscaler, grafana-agent-operator, otel-cli, aws-efs-csi-driver, node-feature-discovery, octo-sts, neuvector-scanner, trillian, rke2-cloud-provider, gitlab-runner, kubevela, keda, kuberay-operator,...

GHSA-8WMF-6V46-5GFG vulnerabilities

Vulnerabilities for packages: kuma, step-ca, containerd, bank-vaults, cluster-autoscaler, grafana-agent-operator, otel-cli, aws-efs-csi-driver, node-feature-discovery, octo-sts, neuvector-scanner, trillian, rke2-cloud-provider, gitlab-runner, kubevela, keda, kuberay-operator,...

SUSE CVE-2026-73546

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's /stats?format=html admin endpoint uses StatsHtmlRender, which sanitizes string statistic values but emits statistic names without HTML encoding. A data-plan...

SUSE CVE-2026-86863

pgAdmin 4's Webserver authentication source is intended to accept an identity asserted by the web server or reverse proxy in front of pgAdmin, delivered through the WSGI/CGI environment. WebserverAuthentication.getuser read config.WEBSERVERREMOTEUSER from request.environ and, when that returned...

CLEANSTART-2026-BI76968 privileged Vault operator within the root namespace with write permission to {{sys/audit}} may obtain code execution on the underlying host if a plugin directory is set in Vault’s configuration

Security vulnerability affects the vault package. A privileged Vault operator within the root namespace with write permission to sys/audit may obtain code execution on the underlying host if a plugin directory is set in Vault’s configuration...

CLEANSTART-2026-OX83822 Vault Community and Vault Enterprise rekey and recovery key operations can lead to a denial of service due to uncontrolled cancellation by a Vault operator

Security vulnerability affects the vault package. Vault Community and Vault Enterprise rekey and recovery key operations can lead to a denial of service due to uncontrolled cancellation by a Vault operator...

PT-2026-95774

Name of the Vulnerable Software and Affected Versions BlockSpare versions prior to 4.2.7 Description The BlockSpare plugin for WordPress contains an authorization bypass flaw caused by incorrect logic within the permission callback. The issue stems from the use of an AND && operator instead of an...

CVE-2026-93991: Authorization Bypass Through User-Controlled Key

Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals operator. Attackers with namespace-scoped list permissions can use a...

PT-2026-95875

Name of the Vulnerable Software and Affected Versions Argo Workflows versions 4.1.0 through 4.1.3 Description An authorization bypass exists in the ListArchivedWorkflows function. The issue occurs when the metadata.namespace field selector utilizes the NotEquals operator, causing a failure to app...

CVE-2026-1242: Incorrect Authorization

The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic in the permission callback in all versions up to, and including, 4.2.6 due to the use of an AND && operator instead of an OR || operator. This makes it possible for authenticated attackers, with...

CVE-2026-81870 vulnerabilities

Vulnerabilities for packages: llm-d-router-fips, commercial-gitlab-rails-ee-fips, migrate, ory-kratos, cert-manager-fips, databricks-cli, flux-kustomize-controller, datadog-agent-fips, kubernetes-csi-external-resizer-fips, eck-operator, gitness, cadvisor, victoriametrics-operator, volsync,...

GHSA-8WMF-6V46-5GFG vulnerabilities

Vulnerabilities for packages: llm-d-router-fips, commercial-gitlab-rails-ee-fips, migrate, ory-kratos, cert-manager-fips, databricks-cli, flux-kustomize-controller, datadog-agent-fips, kubernetes-csi-external-resizer-fips, eck-operator, gitness, cadvisor, victoriametrics-operator, volsync,...

GHSA-H7VF-4X9W-H99V vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, cluster-api-helm-controller, kube-arangodb-fips, kyverno-fips, ocm-cli, flux-helm-controller, ocm-kubernetes-controller-fips, envoy-gateway-fips, opentofu-fips, gitness, kyverno-notation-aws, commercial-kyverno, gitlab-operator, consul-k8s,...

GHSA-M37J-52J7-PJW7 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, cluster-api-helm-controller, kube-arangodb-fips, kyverno-fips, ocm-cli, flux-helm-controller, ocm-kubernetes-controller-fips, envoy-gateway-fips, opentofu-fips, gitness, kyverno-notation-aws, commercial-kyverno, gitlab-operator, consul-k8s,...

Wordfence Argus Discovers Critical Vulnerability in libheif, the Library That Opens iPhone Photos on Your Server

On September 1, 2026, the libheif project released version 1.23.3, closing a critical heap buffer overflow that the Wordfence Threat Intelligence team, using Wordfence Argus, discovered and reported four days earlier. The libheif maintainer, Dirk Farin, gave it a score of 9.8 out of 10 on the CVS...