ingress-nginx

Ingress NGINX 退役 退役 关于 Ingress NGINX 退役你需要了解的信息： 尽力维护将持续至 2026 年 3 月。 此后将不再发布新版本，不再修复错误，也不对任何可能发现的安全漏洞进行更新。 Ingress NGINX 的现有部署不会受影响。 现有项目产物（例如 Helm Chart 和容器镜像）将继续可用。 Ingress NGINX 控制器 概述 ingress-nginx 曾是一个 Kubernetes 的 Ingress 控制器，它使用 NGINX 作为反向代理和负载均衡器。 在 Kubernetes 文档站点上了解更多关于 Ingress 的信息。 使用...

CVE-2026-57475

Deloitte AI Assist for Customer had an unauthenticated POST vulnerability on public API endpoints that allowed a remote attacker to perform limited additions to the configuration. These changes were not used by the system. On 2026-03-25, access was restricted and authentication enforced for the e...

CVE-2026-4764 Privilege Escalation in Dialogflow CX via Playbook Import

A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import. This vulnerability was...

EUVD-2026-36221

A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import. This vulnerability was...

Wordfence Bug Bounty Program Monthly Report – March 2026

In March 2026, the Wordfence Bug Bounty Program received 1718 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfence Threat...

CVE-2026-21023

The vulnerability CVE-2026-21023 affects PackageManagerService prior to SMR Mar-2026 Release 1, enabling local attackers to modify installation restrictions on specific apps. Root cause: insufficient verification of data authenticity in PackageManagerService. Impact per the sources: trivial local...

CVE-2026-40873 mailcow: dockerized vulnerable to stored XSS in Quarantine attachment filenames

mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, the Quarantine details modal injects attachment filenames into HTML without escaping, allowing arbitrary HTML/JS execution. An attacker can deliver an email with a crafted attachment name s...

Security Updates for Microsoft Windows Admin Center in Azure Portal (March 2026)

The Microsoft Windows Admin Center in Azure Portal installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability: - Elevation of Privilege vulnerability in Windows Admin Center in Azure Portal CVE-2026-23660 Note that Nessus has not tested for this issue...

PT-2026-30819

Name of the Vulnerable Software and Affected Versions Weaver Fanwei E-cology versions prior to 20260312 Description An unauthenticated remote code execution flaw exists due to exposed debug functionality. Attackers can execute arbitrary system commands by sending crafted POST requests to the...

Security Bulletin: NVIDIA Jetson and IGX Devices - March 2026

NVIDIA has released a software update for NVIDIA® Jetson Linux. To protect your system, download and install this software update from the APT server or Jetson Download Center page, Jetson Linux Link and IGX Link. Go to NVIDIA Product Security...

Fedora 42 : dotnet8.0 (2026-66c97240f2)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-66c97240f2 advisory. This is the March 2026 release of .NET 8 Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.25/8.0.125.md - Runtime:...

Fedora 42 : dotnet9.0 (2026-8ae04c01e3)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8ae04c01e3 advisory. This is the March 2026 release of .NET 9. Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.14/9.0.115.md - Runtime:...

CVE-2026-33881

creationtimestamp| type| source ---|---|--- 2026-03-27 23:27:55+00:00| seen| Telegram/9UoOcMml4hO1LPqEQWig8KjS1ZNRBXJeCq-u3-UaU0LNh0...

CVE-2026-34395

creationtimestamp| type| source ---|---|--- 2026-03-27 18:42:39+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-77jp-mgcw-rfmr...

CVE-2026-33686

creationtimestamp| type| source ---|---|--- 2026-03-26 22:18:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyn3ypzwa2x 2026-03-26 22:18:36+00:00| seen| https://bsky.app/profile/potato.software/post/3mhyn3zn4td2z 2026-03-26 22:56:19+00:00| seen|...

CVE-2026-33494

creationtimestamp| type| source ---|---|--- 2026-03-26 18:01:14+00:00| seen| https://infosec.exchange/users/offseq/statuses/116296782554333231 2026-03-26 18:01:16+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhy6pudmxi2j 2026-03-26 19:04:07+00:00| seen|...

CVE-2026-20989

Improper verification of cryptographic signature in Font Settings prior to SMR Mar-2026 Release 1 allows physical attackers to use custom font...

Security Bulletin: IBM Operational Decision Manager for March 2026 - Multiple CVEs addressed

Summary IBM Operational Decision Manager is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-41254...

CVE-2026-33917

creationtimestamp| type| source ---|---|--- 2026-03-26 01:00:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwfokbfmu2d 2026-03-26 01:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwfpllrut2r 2026-03-28 12:00:16+00:00| seen|...

Fedora 44 : dotnet8.0 (2026-702a03ac4d)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-702a03ac4d advisory. This is the March 2026 release of .NET 8 Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.25/8.0.125.md - Runtime:...