CVE-2026-50162 vulnerabilities

Vulnerabilities for packages: tigera-operator, gogatekeeper, helm-operator, rancher-agent, zarf, manifest-tool, k9s, opentofu, cluster-api-helm-controller, oras, rancher-helm, steampipe, tw, falcoctl, argocd-image-updater, argo-cd, kots, kubescape-operator, maru, teleport, helm-set-status,...

GHSA-VH4V-2XQ2-G5CG vulnerabilities

Vulnerabilities for packages: tigera-operator, gogatekeeper, helm-operator, rancher-agent, zarf, manifest-tool, k9s, opentofu, cluster-api-helm-controller, oras, rancher-helm, steampipe, tw, falcoctl, argocd-image-updater, argo-cd, kots, kubescape-operator, maru, teleport, helm-set-status,...

GHSA-8XWF-RJM4-XVHV vulnerabilities

Vulnerabilities for packages: tigera-operator, gogatekeeper, helm-operator, rancher-agent, zarf, manifest-tool, k9s, opentofu, cluster-api-helm-controller, oras, rancher-helm, steampipe, tw, falcoctl, argocd-image-updater, argo-cd, kots, kubescape-operator, maru, teleport, helm-set-status,...

GHSA-JXPM-75MH-9FP7 vulnerabilities

Vulnerabilities for packages: tigera-operator, gogatekeeper, helm-operator, rancher-agent, zarf, manifest-tool, k9s, opentofu, cluster-api-helm-controller, oras, rancher-helm, steampipe, tw, falcoctl, argocd-image-updater, argo-cd, kots, kubescape-operator, maru, teleport, helm-set-status,...

CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: tigera-operator, gogatekeeper, helm-operator, rancher-agent, zarf, manifest-tool, k9s, opentofu, cluster-api-helm-controller, oras, rancher-helm, steampipe, tw, falcoctl, argocd-image-updater, k8sgpt, argo-cd, kots, kubescape-operator, maru, teleport, helm-set-status...

GHSA-XF85-363P-868W vulnerabilities

Vulnerabilities for packages: tigera-operator, gogatekeeper, helm-operator, rancher-agent, zarf, manifest-tool, k9s, opentofu, cluster-api-helm-controller, oras, rancher-helm, steampipe, tw, falcoctl, argocd-image-updater, k8sgpt, argo-cd, kots, kubescape-operator, maru, teleport, helm-set-status...

MAL-2026-6726 Malicious code in db-convertor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7480b95a12688a84f3efd3d4c5c8a82c5c761f1f462eb22201f4385fb9bf691c index.js defines a method queryDBConnect on the exported DivbloxDatabaseConnector class that base64-decodes a hardcoded constant HASHKEY to the URL...

Malicious code in db-convertor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7480b95a12688a84f3efd3d4c5c8a82c5c761f1f462eb22201f4385fb9bf691c index.js defines a method queryDBConnect on the exported DivbloxDatabaseConnector class that base64-decodes a hardcoded constant HASHKEY to the URL...

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API

The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that's designed to gain surreptitious access to a victim's email correspondence via the Google API. "In this campaign, the attackers focused their attention on corporate email communications hosted on Gmail,...

Security Bulletin: Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in golang.org/x/net

Summary Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in golang.org/x/net. CVE-2026-33814 The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-33814 DESCRIPTION: When processing HTTP/2 SETTINGS frames, transport will enter an infinite loo...

Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in net

Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in net. CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502, CVE-2026-42506 The vulnerabilities have been addressed. Vulnerability Details...

Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates

Summary IBM App Connect Enterprise Certified Container ACEcc is built on the Red Hat Universal Base Images. ACEcc operator versions 12.0.25 LTS and 13.3.0 contain fixes to the listed CVEs found in the base images. This bulletin provides patch information to address the reported vulnerabilities...

Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs

Summary IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs. This bulletin provides patch information to address the vulnerabilities Vulnerability Details CVEID:CVE-2026-56761 DESCRIPTION: hono...

AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack

Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent. Its Threat Research Team calls the operator JADEPUFFER and says a large language model handled the whole job: breaking in, stealing credentials, moving deeper into the...

FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations

The recently discovered financially-motivated FortiBleed campaign has been attributed to INC and Lynx ransomware operations, indicating that the verified, stolen credentials were intended for follow-on intrusions. "An operator tied to FortiBleed's infrastructure was found actively working...

New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC , travels in Python proof-of-concept PoC repositories on GitHub that claim to exploit hot new CVEs. Run one, and it quietly lifts your saved passwords,...

Important: Red Hat Security Advisory: Streams for Apache Kafka 2.9.4 release and security update

Streams for Apache Kafka 2.9.4 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

PT-2026-55358

Summary Configuring encrypt:rsa:algorithm=OAEP does not enable OAEP encryption. Due to an incorrect BouncyCastle transformation string, the OAEP setting selects PKCS1 v1.5, which is the same algorithm as the DEFAULT setting. Impact Operators who configure encrypt:rsa:algorithm=OAEP to obtain...

PT-2026-55382

Summary Workspace .env could override Homebrew executable selection for skill install flows. In affected versions, a workspace .env in a repository opened by a trusted operator could override the Homebrew executable used by the install helper. This advisory is scoped to the named feature and...

PT-2026-55417

Summary MCP loopback could skip owner-only tool policy for non-owner callers. In affected versions, a non-owner caller reaching the affected loopback path could skip owner-only tool policy and before-tool-call hooks. This advisory is scoped to the named feature and configuration. It does not chan...