GO-2026-6256 vulnerabilities

Vulnerabilities for packages: kaniko-fips, conftest-fips, kubescape-server-fips, trivy-fips, zot, kubescape, conftest, skaffold, trivy-operator-fips, kaniko, kubescape-server, livekit-cli, trivy, docker-fips, podman, cloudbeat-fips, scorecard, guac, skaffold-fips, podman-fips, cloudbeat...

GO-2026-6278 vulnerabilities

Vulnerabilities for packages: etcd, virt-api-fips, cosmo-router, cosmo-router-fips, milvus, gpu-operator, gpu-operator-fips, juicefs-csi-driver, cilium, prometheus-fips, redis-operator, virt-controller-fips, cluster-api, emissary, amazon-ssm-agent, infinispan-operator, verticadb-operator-fips,...

GO-2026-6278 vulnerabilities

Vulnerabilities for packages: etcd, kubernetes, guac, aws-node-termination-handler, juicefs-csi-driver, infinispan-operator, cloudflared, amazon-cloudwatch-agent, op-geth, redis-operator, jitsucom-bulker, rancher-telemetry, verticadb-operator, kubevela, emissary...

CVE-2026-47843

In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier...

EUVD-2026-66678

In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier...

CVE-2026-74742

In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is only initialized by xdprxqinforeg in vethenablexdprange, which runs only...

UBUNTU-CVE-2026-74742

In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is only initialized by xdprxqinforeg in vethenablexdprange, which runs only...

CVE-2026-74742 veth: fix queue index used to wake the peer txq in veth_poll

In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is only initialized by xdprxqinforeg in vethenablexdprange, which runs only...

CVE-2026-74742

Linux kernel veth has a bug where veth_poll() derives the peer TX queue index from rq->xdp_rxq.queue_index, a field only populated when an XDP program is attached. On the plain GRO/NAPI path the value stays 0 for every queue. In a multi-queue setup with GRO enabled and no XDP, all NAPI pollers...

multi_exploit_wp

WordPress Multi-Exploit Tool - HFT404 !Versionhttps://img...

GHSA-H83V-XRJ2-HCMQ vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-79229

creationtimestamp| type| source ---|---|--- 2026-08-26 05:17:45+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260826 2026-08-31 05:17:14+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260831...

EUVD-2026-66236

The implementation of this ioctl attempts to acquire locks on all channels in a sync group. If locking a channel would block, it releases the sync group list lock and sleeps. Upon reawakening, it is possible that the sync group structure is freed, but the implementation did not handle this...

SUSE CVE-2026-78676

GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooksPath. Attackers can craft config files with embedded newlines that become live git directives after any unrelated...

CVE-2026-69129: Authorization Bypass Through User-Controlled Key

KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 2.0.0, cluster-scoped APIs do not consistently validate per-cluster access, allowing an authenticated user with cluster management permissions to operate on clusters outside the scope they were granted. Because...

PT-2026-82247

In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier...

PT-2026-82122

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the veth poll function where the index of the peer TX queue to wake is incorrectly derived from rq-xdp rxq.queue index. This field is only initialized when an XDP...

CLSA-2026-1787675020 TuxCare security update for 30 packages (3 CVEs)

TuxCare rebuilt 30 packages to address 3 CVEs. Fixed in 7.0.70-tuxcare.1...

CVE-2026-55541

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, praisonai serve agents and praisonai serve unified parse --api-key but createagentsapp and createunifiedapp do not install a credential check. Unauthenticated callers can reach POST /agents and POST /api/v1/agents/id/invoke. This...

CVE-2026-55539

PraisonAI, a multi-agent teams system, exposed its async Jobs API (/api/v1/runs) without authentication prior to version 4.6.51. The create_app function mounted the endpoint with no access control, allowing any reachable caller to submit jobs, read results, cancel runs, or delete jobs using opera...