CVE-2026-57472

Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in the file management functionality of the XML-RPC management interface of KUNBUS RevPiPyLoad in version 0.11.0 that allows a local unauthenticated attacker to...

CVE-2026-57472

CVE-2026-57472 affects the KUNBUS RevPiPyLoad 0.11.0 XML-RPC management interface. A CWE-22 path traversal in the file management functionality enables a local unauthenticated attacker to delete arbitrary files with the RevPiPyLoad daemon privileges, leading to loss of configuration integrity and...

CVE-2026-57472 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in KUNBUS RevPiPyLoad

Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in the file management functionality of the XML-RPC management interface of KUNBUS RevPiPyLoad in version 0.11.0 that allows a local unauthenticated attacker to...

CVE-2026-57471

CVE-2026-57471 affects KUNBUS RevPiPyLoad 0.11.0 via the XML-RPC management interface. A path traversal flaw in the file management component allows a local unauthenticated attacker to read arbitrary files with the RevPiPyLoad daemon’s privileges by sending crafted requests to the local managemen...

EUVD-2026-58677

Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in the file management functionality of the XML-RPC management interface of KUNBUS RevPiPyLoad in version 0.11.0 that allows a local unauthenticated attacker to rea...

CVE-2026-57471 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in KUNBUS RevPiPyLoad

Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in the file management functionality of the XML-RPC management interface of KUNBUS RevPiPyLoad in version 0.11.0 that allows a local unauthenticated attacker to rea...

CVE-2026-19821

A vulnerability was determined in Tenda AC12 15.03.06.23multiTD01. This vulnerability affects the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg of the component httpd web management interface. This manipulation of the argument rebootTime causes buffer overflow. The attack ma...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, boring-registry-fips, mattermost-fips, rancher-security-scan, kyverno, istio-fips, zitadel, beats, k9s-fips, docker-compose-fips, neuvector-sigstore-interface-fips, pluto-fips, tkn-fips, jitsucom-bulker, ratify-fips, grafana, bank-vaults,...

GO-2026-4316 vulnerabilities

Vulnerabilities for packages: aws-lambda-runtime-interface-emulator-fips, cloudbeat, custom-pod-autoscaler-fips, custom-pod-autoscaler, commercial-kyverno, aws-lambda-runtime-interface-emulator, fleet-server-fips, cloudbeat-fips, kyverno-fips...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: melange, tekton-chains, slsa-verifier, ko-fips, spire-server, neuvector-sigstore-interface, tkn, ko, chainctl, tekton-chains-fips, falcoctl, apko, falcoctl-fips, policy-controller, skaffold, vexctl, aactl, zot, flux-source-controller, tkn-fips, goreleaser, zarf,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: skaffold, trivy, vexctl, tkn, teleport, zot, trivy-operator, gitsign, kyverno-notation-aws, witness, flux-source-controller, tflint, tekton-chains, cosign, gh, falcoctl, neuvector-sigstore-interface, goreleaser, ko, docker, buildkitd, zarf, kubescape,...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: aactl, kyverno, crossplane, tkn, teleport, trivy-operator, gitsign, kyverno-notation-aws, tflint, tekton-chains, falcoctl, neuvector-sigstore-interface, goreleaser, slsa-verifier, ko, ratify, zarf, kubescape, spire-server, policy-controller...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: pulumi, step-kms-plugin, aactl, argo-cd, external-secrets-operator, crossplane-provider-aws-cloudformation, crossplane-provider-aws-firehose, crossplane-provider-aws-sqs, zot, crossplane-provider-family-aws, vault-benchmark, flux-source-controller, cosign, gh, src,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: aactl, skaffold, docker-cli-buildx, vexctl, tkn, teleport, zot, gitsign, kyverno-notation-aws, witness, flux-source-controller, tflint, tekton-chains, cosign, gh, falcoctl, neuvector-sigstore-interface, goreleaser, ko, ratify, zarf, kubescape, sigstore-scaffolding,...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: aactl, skaffold, trivy, vexctl, tkn, teleport, zot, trivy-operator, gitsign, kyverno-notation-aws, witness, flux-source-controller, tflint, tekton-chains, cosign, gh, falcoctl, neuvector-sigstore-interface, goreleaser, slsa-verifier, ko, ratify, buildkitd, zarf,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: policy-controller, xeol, guac, buildah, aactl, skaffold, trivy, portieris, vexctl, tkn, rekor, zot, trivy-operator, gitsign, kyverno-notation-aws, skopeo, witness, flux-source-controller, timestamp-authority, tflint, tekton-chains, cosign, gh, falcoctl,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: aactl, kyverno, skaffold, trivy, crossplane, docker-cli-buildx, vexctl, tkn, teleport, zot, trivy-operator, gitsign, kyverno-notation-aws, witness, flux-source-controller, tflint, tekton-chains, cosign, gh, falcoctl, neuvector-sigstore-interface, goreleaser,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: aactl, skaffold, trivy, vexctl, tkn, teleport, rekor, zot, trivy-operator, gitsign, kyverno-notation-aws, witness, flux-source-controller, tflint, tekton-chains, cosign, gh, falcoctl, neuvector-sigstore-interface, goreleaser, slsa-verifier, ko, docker, ratify,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: aactl, skaffold, trivy, vexctl, tkn, teleport, rekor, zot, trivy-operator, gitsign, kyverno-notation-aws, witness, flux-source-controller, tflint, tekton-chains, cosign, gh, falcoctl, neuvector-sigstore-interface, goreleaser, slsa-verifier, ko, docker, ratify,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: glow, k8sgateway, cloud-provider-vsphere, conftest, nri-rabbitmq, step-kms-plugin, aactl, azure-service-operator, chartmuseum, controller-gen, kube-logging-operator, kind, portieris, kubernetes-dashboard-api, swagger, nri-redis, spire-controller-manager, zot, gobump,...