EUVD-2026-38448

A missing authorization flaw was found in the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying that the ClusterLogForwarder creator has permission to use those credentials, allowing a delegated editor to exfiltrat...

CVE-2026-10609 Openshift/cluster-logging-operator: cluster logging operator creates and forwards serviceaccount tokens without verifying clf creator authorization

A missing authorization flaw was found in the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying that the ClusterLogForwarder creator has permission to use those credentials, allowing a delegated editor to exfiltrat...

CVE-2026-10609

The vulnerability CVE-2026-10609 affects the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying that the ClusterLogForwarder creator has permission to use those credentials, enabling a delegated editor to exfiltrate...

CVE-2026-10609

A missing authorization flaw was found in the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying that the ClusterLogForwarder creator has permission to use those credentials, allowing a delegated editor to exfiltrat...

CVE-2026-10609

A missing authorization flaw was found in the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying that the ClusterLogForwarder creator has permission to use those credentials, allowing a delegated editor to exfiltrat...

OPENSUSE-SU-2026:21154-1 Security update for ofono

This update for ofono fixes the following issues: Changes in ofono: - Reference the tracking bugs for the SMS/STK/USSD decoder security fixes applied upstream across the 2.14-2.17 updates: SMS decoder stack buffer overflows: CVE-2023-2794 boo1218292, CVE-2023-4232 boo1218293, CVE-2023-4233...

Agentic AI: The Weapon That No Longer Needs a Warrior

Every weapon begins as an extension of the hand that holds it. The spear lengthened the reach of the arm. The bow sent the point flying without the throw. The rifle placed a man's death a quarter mile beyond his sight, and the aircraft carried that death across oceans. At each turn, the distance...

Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in follow-redirects

Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in follow-redirects. CVE-2026-40895 The vulnerabilities have been addressed Vulnerability Details CVEID:CVE-2026-40895 DESCRIPTION: follow-redirects is an open source, drop-in...

Cross-site Scripting (XSS)

DOMPurify is vulnerable to cross-site scripting XSS. The vulnerability is due to the use of realm-specific instanceof checks when sanitizing DOM nodes from a different same-origin realm, which allows an attacker to bypass sanitization for form attributes, template content, and shadow DOM, leading...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the process that creates and forwards ServiceAccount tokens to output destinations without verifying the authorization of the creator. An attacker can gain unauthorized access to sensitive credentials by...

CVE-2024-33394 vulnerabilities

Vulnerabilities for packages: virt-controller-fips, harvester, virt-operator-fips, virt-operator, virt-launcher, harvester-fips...

CVE-2025-14525 vulnerabilities

Vulnerabilities for packages: virt-controller-fips, harvester, virt-operator-fips, virt-handler, virt-launcher, harvester-fips...

GHSA-4Q63-MR2M-57HF vulnerabilities

Vulnerabilities for packages: virt-controller-fips, harvester, virt-operator-fips, virt-operator, virt-launcher, harvester-fips...

GHSA-VJHF-6XFR-5P9G vulnerabilities

Vulnerabilities for packages: virt-controller-fips, harvester, virt-operator-fips, virt-operator, virt-launcher, harvester-fips...

CVE-2024-31420 vulnerabilities

Vulnerabilities for packages: virt-controller-fips, harvester, virt-operator-fips, virt-operator, virt-launcher, harvester-fips...

GHSA-25MH-HP8X-CGRV vulnerabilities

Vulnerabilities for packages: virt-controller-fips, harvester, virt-operator-fips, virt-handler, virt-launcher, harvester-fips...

GHSA-WV3X-4VXV-WHPP vulnerabilities

Vulnerabilities for packages: ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, logstash, ruby3.2-fluentd-kubernetes-daemonset, logstash-fips, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.3-rails, kube-fluentd-operator, kube-logging-operator,...

GHSA-6WX8-W4F5-WWCR vulnerabilities

Vulnerabilities for packages: ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, logstash, ruby3.2-fluentd-kubernetes-daemonset, logstash-fips, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.3-rails, kube-fluentd-operator, kube-logging-operator,...

CVE-2026-54904 vulnerabilities

Vulnerabilities for packages: ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, logstash, ruby3.2-fluentd-kubernetes-daemonset, logstash-fips, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.3-rails, kube-fluentd-operator, kube-logging-operator,...

GHSA-H8W8-99G7-QMVJ vulnerabilities

Vulnerabilities for packages: ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, logstash, ruby3.2-fluentd-kubernetes-daemonset, logstash-fips, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.3-rails, kube-fluentd-operator, kube-logging-operator,...