GO-2026-5778 vulnerabilities

Vulnerabilities for packages: aactl, kyverno, crossplane, tkn, teleport, trivy-operator, gitsign, kyverno-notation-aws, tflint, tekton-chains, falcoctl, neuvector-sigstore-interface, goreleaser, slsa-verifier, ko, ratify, zarf, kubescape, spire-server, policy-controller...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: pulumi, step-kms-plugin, aactl, argo-cd, external-secrets-operator, crossplane-provider-aws-cloudformation, crossplane-provider-aws-firehose, crossplane-provider-aws-sqs, zot, crossplane-provider-family-aws, vault-benchmark, flux-source-controller, cosign, gh, src,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: aactl, skaffold, docker-cli-buildx, vexctl, tkn, teleport, zot, gitsign, kyverno-notation-aws, witness, flux-source-controller, tflint, tekton-chains, cosign, gh, falcoctl, neuvector-sigstore-interface, goreleaser, ko, ratify, zarf, kubescape, sigstore-scaffolding,...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: aactl, skaffold, trivy, vexctl, tkn, teleport, zot, trivy-operator, gitsign, kyverno-notation-aws, witness, flux-source-controller, tflint, tekton-chains, cosign, gh, falcoctl, neuvector-sigstore-interface, goreleaser, slsa-verifier, ko, ratify, buildkitd, zarf,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: policy-controller, xeol, guac, buildah, aactl, skaffold, trivy, portieris, vexctl, tkn, rekor, zot, trivy-operator, gitsign, kyverno-notation-aws, skopeo, witness, flux-source-controller, timestamp-authority, tflint, tekton-chains, cosign, gh, falcoctl,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: aactl, kyverno, skaffold, trivy, crossplane, docker-cli-buildx, vexctl, tkn, teleport, zot, trivy-operator, gitsign, kyverno-notation-aws, witness, flux-source-controller, tflint, tekton-chains, cosign, gh, falcoctl, neuvector-sigstore-interface, goreleaser,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: aactl, skaffold, trivy, vexctl, tkn, teleport, rekor, zot, trivy-operator, gitsign, kyverno-notation-aws, witness, flux-source-controller, tflint, tekton-chains, cosign, gh, falcoctl, neuvector-sigstore-interface, goreleaser, slsa-verifier, ko, docker, ratify,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: glow, k8sgateway, cloud-provider-vsphere, conftest, nri-rabbitmq, step-kms-plugin, aactl, azure-service-operator, chartmuseum, controller-gen, kube-logging-operator, kind, portieris, kubernetes-dashboard-api, swagger, nri-redis, spire-controller-manager, zot, gobump,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: aactl, skaffold, trivy, vexctl, tkn, teleport, rekor, zot, trivy-operator, gitsign, kyverno-notation-aws, witness, flux-source-controller, tflint, tekton-chains, cosign, gh, falcoctl, neuvector-sigstore-interface, goreleaser, slsa-verifier, ko, docker, ratify,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, policy-controller, actions-runner-controller, guac, kargo, pulumi, snyk-cli, ksops, step-ca, aactl, bank-vaults, scorecard, crossplane-provider-azure-managedidentity, k3d, opentelemetry-collector, rabbitmq-messaging-topology-operator, rook...

CVE-2026-19791

A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component httpd web management interface. Executing a manipulation of the argument staticRouteNet can lead to stack-based buffer overflow. The attack ma...

CVE-2026-19790

A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...

CVE-2026-19788

A vulnerability was found in Tenda AC1206 15.03.06.23multiTD01. This affects the function setdevicename of the file /goform/SetOnlineDevName of the component httpd web management interface. The manipulation of the argument devName results in stack-based buffer overflow. The attack may be launched...

CVE-2026-19792

A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/module of the component httpd web management interface. Performing a manipulation of the argument portMappingServer/porMappingtInternal/portMappingExternal results in buffer...

EUVD-2026-58584

A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component httpd web management interface. Executing a manipulation of the argument staticRouteNet can lead to stack-based buffer overflow. The attack ma...

EUVD-2026-58575

A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...

CVE-2026-19790

A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...

CVE-2026-19789

A vulnerability was determined in Tenda AC1206 15.03.06.23multiTD01. This vulnerability affects the function setwlguestiplist of the file /goform/WifiGuestSet of the component httpd web management interface. This manipulation of the argument shareSpeed causes stack-based buffer overflow. Remote...

CVE-2026-19789

The vulnerability CVE-2026-19789 affects Tenda AC1206 devices running 15.03.06.23_multi_TD01, specifically the httpd web management interface’s /goform/WifiGuestSet function set_wl_guest_iplist. Manipulating the argument shareSpeed triggers a stack-based buffer overflow, leading to remote code ex...

CVE-2026-19788

This CVE affects Tenda AC1206 running 15.03.06.23_multi_TD01. The vulnerability resides in the httpd web management interface, specifically the SetOnlineDevName function (/goform/SetOnlineDevName). User-controlled argument devName triggers a stack-based buffer overflow, permitting a remote attack...