GO-2025-4192 vulnerabilities

Vulnerabilities for packages: gitsign, skaffold, tflint, ko, cosign, neuvector-sigstore-interface, aactl, zot, witness, spire-server, tekton-chains, vexctl, sigstore-scaffolding, falcoctl, kubescape, policy-controller, docker-cli-buildx, ratify, teleport, zarf, goreleaser, kyverno-notation-aws, g...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: gitsign, docker-compose, skaffold, trivy, tflint, ko, cosign, neuvector-sigstore-interface, podman, aactl, undock, fulcio, zot, witness, skopeo, spire-server, rekor, tekton-chains, trivy-operator, vexctl, sigstore-scaffolding, timestamp-authority, falcoctl,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: gitsign, skaffold, trivy, tflint, ko, cosign, kyverno, neuvector-sigstore-interface, aactl, zot, witness, spire-server, tekton-chains, vexctl, trivy-operator, sigstore-scaffolding, crossplane, falcoctl, kubescape, slsa-verifier, buildkitd, policy-controller, docker,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, nri-consul, emissary, azure-service-operator, regclient, headlamp, spire-controller-manager, envconsul, k8sgateway, rclone, fulcio, caddy, kapp, lazydocker, k3d, kubernetes-csi-driver-nfs, opa, cilium-cli, nri-haproxy, kor, kube-bench, helm-operator,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: gitsign, skaffold, trivy, tflint, ko, cosign, neuvector-sigstore-interface, aactl, zot, witness, spire-server, rekor, tekton-chains, trivy-operator, vexctl, sigstore-scaffolding, falcoctl, kubescape, slsa-verifier, buildkitd, policy-controller, docker, ratify,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: gitsign, skaffold, trivy, tflint, ko, cosign, neuvector-sigstore-interface, aactl, zot, witness, spire-server, rekor, tekton-chains, trivy-operator, vexctl, sigstore-scaffolding, falcoctl, kubescape, slsa-verifier, buildkitd, policy-controller, docker, ratify,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: gitsign, k3s, crossplane-provider-azure-storage, bank-vaults, step-ca, cosign, neuvector-sigstore-interface, sops, aactl, fulcio, zot, grafana-mimir, skopeo, k3d, spire-server, crossplane-provider-azure, flux-helm-controller, flux-image-reflector-controller, rekor,...

CVE-2026-19791

A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component httpd web management interface. Executing a manipulation of the argument staticRouteNet can lead to stack-based buffer overflow. The attack ma...

CVE-2026-19790

A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...

CVE-2026-19788

A vulnerability was found in Tenda AC1206 15.03.06.23multiTD01. This affects the function setdevicename of the file /goform/SetOnlineDevName of the component httpd web management interface. The manipulation of the argument devName results in stack-based buffer overflow. The attack may be launched...

CVE-2026-19792

A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/module of the component httpd web management interface. Performing a manipulation of the argument portMappingServer/porMappingtInternal/portMappingExternal results in buffer...

EUVD-2026-58584

A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component httpd web management interface. Executing a manipulation of the argument staticRouteNet can lead to stack-based buffer overflow. The attack ma...

EUVD-2026-58575

A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...

CVE-2026-19790

A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...

CVE-2026-19789

The vulnerability CVE-2026-19789 affects Tenda AC1206 devices running 15.03.06.23_multi_TD01, specifically the httpd web management interface’s /goform/WifiGuestSet function set_wl_guest_iplist. Manipulating the argument shareSpeed triggers a stack-based buffer overflow, leading to remote code ex...

CVE-2026-19789

A vulnerability was determined in Tenda AC1206 15.03.06.23multiTD01. This vulnerability affects the function setwlguestiplist of the file /goform/WifiGuestSet of the component httpd web management interface. This manipulation of the argument shareSpeed causes stack-based buffer overflow. Remote...

CVE-2026-19788

This CVE affects Tenda AC1206 running 15.03.06.23_multi_TD01. The vulnerability resides in the httpd web management interface, specifically the SetOnlineDevName function (/goform/SetOnlineDevName). User-controlled argument devName triggers a stack-based buffer overflow, permitting a remote attack...

CVE-2026-19788

A vulnerability was found in Tenda AC1206 15.03.06.23multiTD01. This affects the function setdevicename of the file /goform/SetOnlineDevName of the component httpd web management interface. The manipulation of the argument devName results in stack-based buffer overflow. The attack may be launched...

CVE-2026-19771

A vulnerability was identified in Baicells EG3661M BaiCEBQ62.0.5.3NA. This impacts an unknown function of the file /cgi-bin/luci of the component LuCI Web Interface. Such manipulation of the argument MaxHops/Timeout/Size leads to os command injection. The attack may be launched remotely. The...

EUVD-2026-58564

A vulnerability was identified in Baicells EG3661M BaiCEBQ62.0.5.3NA. This impacts an unknown function of the file /cgi-bin/luci of the component LuCI Web Interface. Such manipulation of the argument MaxHops/Timeout/Size leads to os command injection. The attack may be launched remotely. The...