97 matches found
PT-2026-100004
Security vulnerability affects the metrics-server-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100021
Security vulnerability affects the metrics-server-fips package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-77097
Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...
CVE-2026-77098
Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...
CVE-2026-77098 Private Metrics Server SQL Injection
Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...
EUVD-2026-72725
Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...
CVE-2026-77097 Private Metrics Server Denial of Service
Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...
CVE-2026-77098 Private Metrics Server SQL Injection
Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...
CVE-2026-77097
Commvault Private Metrics Server is affected by a missing authentication condition that impacts the metrics upload functionality, allowing an unauthenticated network-based attacker to cause a denial of service (high availability impact, low integrity impact). The CNA (Commvault) rates this CVSS 4...
CVE-2026-77097 Private Metrics Server Denial of Service
Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...
CVE-2026-77098
Commvault Private Metrics Server is affected by an SQL injection vulnerability affecting database operations, rated CVSS 3.1: 9.8 (CRITICAL) and CVSS 4.0: 8.8 (HIGH) . CISA SSVC assesses exploitation as "none," automatable as "yes," and technical impact as "partial." No public exploit details are...
EUVD-2026-72726
Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...
CVE-2026-77097: Missing Authentication for Critical Function
Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...
PT-2026-87047
Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...
PT-2026-87046
Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...
CVE-2026-77098: Improper Neutralization of Special Elements used in an SQL Command
Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...
CLEANSTART-2026-PZ86100 Security fixes in metrics-server 0.9.0-r1
Package metrics-server version 0.9.0-r1 fixes 2 vulnerabilities: CVE-2026-73500, ghsa-gcjh-h69q-9w9g...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: apisix-ingress-controller, azure-service-operator, datadog-agent, flux-notification-controller, cert-manager, cluster-api-helm-controller, caddy, cluster-api-ipam-provider-in-cluster, kwok, yunikorn-k8shim, kapp-controller, kubeflow-pipelines, kyverno, calico,...
