CVE-2026-77097

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-77098

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-77098 Private Metrics Server SQL Injection

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-77097 Private Metrics Server Denial of Service

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-77097

Commvault Private Metrics Server is affected by a missing authentication condition that impacts the metrics upload functionality, allowing an unauthenticated network-based attacker to cause a denial of service (high availability impact, low integrity impact). The CNA (Commvault) rates this CVSS 4...

EUVD-2026-72725

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-77098 Private Metrics Server SQL Injection

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

EUVD-2026-72726

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-77098

Commvault Private Metrics Server is affected by an SQL injection vulnerability affecting database operations, rated CVSS 3.1: 9.8 (CRITICAL) and CVSS 4.0: 8.8 (HIGH) . CISA SSVC assesses exploitation as "none," automatable as "yes," and technical impact as "partial." No public exploit details are...

PT-2026-87047

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CLEANSTART-2026-PZ86100 Security fixes in metrics-server 0.9.0-r1

Package metrics-server version 0.9.0-r1 fixes 2 vulnerabilities: CVE-2026-73500, ghsa-gcjh-h69q-9w9g...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-api-ipam-provider-in-cluster, argocd-image-updater, kots, openbao, cluster-api-provider-vsphere, spqr, apisix-ingress-controller, cloud-provider-azure, gatekeeper, kyverno-notation-aws, pulumi-kubernetes-operator, kubernetes-csi-external-health-monitor,...

GO-2023-2044 vulnerabilities

Vulnerabilities for packages: metrics-server...

GO-2023-2045 vulnerabilities

Vulnerabilities for packages: metrics-server...

GO-2023-2042 vulnerabilities

Vulnerabilities for packages: metrics-server...

GO-2023-2041 vulnerabilities

Vulnerabilities for packages: metrics-server, kind, kubeflow-katib...

GO-2023-2043 vulnerabilities

Vulnerabilities for packages: metrics-server, kind, kubeflow-katib...

GO-2023-2095 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, smarter-device-manager-fips, kind, metrics-server, configmap-reload-fips...

GO-2023-2331 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, metrics-server, aws-ebs-csi-driver, cri-tools, envoy-ratelimit, kubescape, temporal-fips, kube-oidc-proxy, rancher-webhook, docker-compose, temporal-server, buildkitd, volume-modifier-for-k8s, kubernetes, kubevela, rancher-webhook-fip...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: trillian-fips, keda-fips, google-cloud-otel-ops-collector, keda, certificate-transparency-fips, ld-relay, minio-fips, opentelemetry-collector-k8s, aws-otel-collector-fips, aws-otel-collector, k8sgpt, metrics-server, grafana-fips, karma, loki-fips, minio-operator-fips...