RHEL 10 : kernel (RHSA-2026:27288)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:27288 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: isotp: fix tx.buf...

RHEL 8 : kernel (RHSA-2026:27353)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:27353 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Use-after-free ...

RHEL 8 : kernel (RHSA-2026:27355)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:27355 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net/sched: actpedit: extend the writab...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, envoy-gateway, grype, k9s, wolfictl, trivy-operator, buildkitd, xeol, trivy, ctop, headlamp, kubevela, rancher-helm, teleport, tigera-operator, datadog-agent, helm-mapkubeapis, kaniko, linkerd2, zarf, kube-arangodb, helm-set-status, kots, syft, k3s...

CVE-2026-47262 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, envoy-gateway, grype, k9s, wolfictl, trivy-operator, buildkitd, xeol, trivy, ctop, headlamp, kubevela, rancher-helm, teleport, tigera-operator, datadog-agent, helm-mapkubeapis, kaniko, linkerd2, zarf, kube-arangodb, helm-set-status, kots, syft, k3s...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, envoy-gateway, grype, k9s, wolfictl, trivy-operator, buildkitd, xeol, trivy, ctop, headlamp, kubevela, rancher-helm, teleport, tigera-operator, datadog-agent, helm-mapkubeapis, kaniko, linkerd2, zarf, kube-arangodb, helm-set-status, kots, syft, k3s...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, envoy-gateway, grype, k9s, wolfictl, trivy-operator, buildkitd, xeol, trivy, ctop, headlamp, kubevela, rancher-helm, teleport, tigera-operator, datadog-agent, helm-mapkubeapis, kaniko, linkerd2, zarf, kube-arangodb, helm-set-status, kots, syft, k3s...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: containerd, docker-cli-buildx, envoy-gateway, grype, k9s, wolfictl, trivy-operator, buildkitd, xeol, trivy, ctop, headlamp, kubevela, rancher-helm, teleport, tigera-operator, datadog-agent, helm-mapkubeapis, kaniko, linkerd2, zarf, kube-arangodb, helm-set-status, kot...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: containerd, docker-cli-buildx, envoy-gateway, grype, k9s, wolfictl, trivy-operator, buildkitd, xeol, trivy, ctop, headlamp, kubevela, rancher-helm, teleport, tigera-operator, datadog-agent, helm-mapkubeapis, kaniko, linkerd2, zarf, kube-arangodb, helm-set-status, kot...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: containerd, docker-cli-buildx, envoy-gateway, grype, k9s, wolfictl, trivy-operator, buildkitd, xeol, trivy, ctop, headlamp, kubevela, rancher-helm, teleport, tigera-operator, datadog-agent, helm-mapkubeapis, kaniko, linkerd2, zarf, kube-arangodb, helm-set-status, kot...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: containerd, docker-cli-buildx, envoy-gateway, grype, k9s, wolfictl, trivy-operator, buildkitd, xeol, trivy, ctop, headlamp, kubevela, rancher-helm, teleport, tigera-operator, datadog-agent, helm-mapkubeapis, kaniko, linkerd2, zarf, kube-arangodb, helm-set-status, kot...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: containerd, docker-cli-buildx, envoy-gateway, grype, k9s, wolfictl, trivy-operator, buildkitd, xeol, trivy, ctop, headlamp, kubevela, rancher-helm, teleport, tigera-operator, datadog-agent, helm-mapkubeapis, kaniko, linkerd2, zarf, kube-arangodb, helm-set-status, kot...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: containerd, docker-cli-buildx, envoy-gateway, grype, k9s, wolfictl, trivy-operator, buildkitd, xeol, trivy, ctop, headlamp, kubevela, rancher-helm, teleport, tigera-operator, datadog-agent, helm-mapkubeapis, kaniko, linkerd2, zarf, kube-arangodb, helm-set-status, kot...

Security Bulletin: Security vulnerability in JavaScript affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak

Summary A security vulnerability in JavaScript affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak. JavaScript is used by IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak as part of its deployment. This bulletin identifies the fix...

jfp-console-poc

JFP Console PoC Tamper-evident autonomous system governor w...

MAL-2026-6235 Malicious code in yianzzkf6687 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59a0aee58573b3030b9d541980fa9d7df8ea55d4e6cc5b3bb349452b908d0e9 On npm install, the postinstall hook scripts/postinstall.js detach-spawns scripts/shell.js with detached: true, stdio: 'ignore', windowsHide: true an...

Malicious code in yianzzkf6687 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59a0aee58573b3030b9d541980fa9d7df8ea55d4e6cc5b3bb349452b908d0e9 On npm install, the postinstall hook scripts/postinstall.js detach-spawns scripts/shell.js with detached: true, stdio: 'ignore', windowsHide: true an...

SUSE CVE-2026-12044

SQL injection in pgAdmin 4 across every dialog template that renders COMMENT ON ... IS '' for a user-supplied description field. The Jinja templates for Domains and their constraints, Foreign Tables, Languages, and Event Triggers, plus the Views OID-lookup query, interpolated the description...

Zhejiang Dahua Technology Co., Ltd.'s DSS has a file upload vulnerability

Zhejiang Dahua Technology Co., Ltd. is a provider and operator of intelligent IoT solutions, with video as its core technology. Zhejiang Dahua Technology Co., Ltd. DSS has a file upload vulnerability; attackers can exploit this vulnerability to upload files with any extension...

SUSE SLES12 Security Update : frr (SUSE-SU-2026:2455-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2455-1 advisory. This update for frr fixes the following issues - CVE-2026-5107: Fixed an improper access controls in EVPN Type-2 Route Handler bsc1261013. -...