CVE-2026-89766: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: pidfd: hold execupdatelock around namespace ioctl The PIDFDGETNAMESPACE ioctls in pidfdioctl perform a filesystem credentials ptrace access check before handing out a namespace file descriptor. The accompanying comment states tha...

PT-2026-89767

A flaw was found in multicluster-observability-addon. This vulnerability allows a managed-cluster identity to reference configuration resources outside its designated namespace. This can lead to the disclosure of sensitive hub Secrets to an attacker-controlled managed cluster...

PT-2026-90059

In the Linux kernel, the following vulnerability has been resolved: sysctl: move the "cad pid" entry from pid table to kern reboot table cad pid is global, and kill cad pid is only used in the root namespace. However, due to pid table root permissions, a non-root user can unshare pid/user...

PT-2026-90482

In the Linux kernel, the following vulnerability has been resolved: pidfd: hold exec update lock around namespace ioctl The PIDFD GET NAMESPACE ioctls in pidfd ioctl perform a filesystem credentials ptrace access check before handing out a namespace file descriptor. The accompanying comment state...

PT-2026-90243

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Use svc xprt put to free listener on create failure svc rdma create calls kfreecma xprt when svc rdma create listen id fails. svc xprt init has already acquired a net namespace reference via get net track; kfree bypasses...

EUVD-2026-75574

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.0 until 1.75.1, the archive ZIP backend method Fs.readZip in backend/archive/zip/zip.go accepts archive/zip.File.Name values from an untrusted central directory and exposes...

CVE-2026-88014

rclone versions 1.72.0 through 1.75.1 are affected by a Zip Slip vulnerability in the archive ZIP backend ((*Fs).readZip in backend/archive/zip/zip.go). The method accepts archive/zip.File.Name values from an untrusted central directory and exposes cleaned entry names without verifying they remai...

CVE-2026-88014 rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.0 until 1.75.1, the archive ZIP backend method Fs.readZip in backend/archive/zip/zip.go accepts archive/zip.File.Name values from an untrusted central directory and exposes...

CVE-2026-88014 rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.0 until 1.75.1, the archive ZIP backend method Fs.readZip in backend/archive/zip/zip.go accepts archive/zip.File.Name values from an untrusted central directory and exposes...

CVE-2026-88898 AppFlowy-Cloud 0.7.2 through 0.9.64 Missing Workspace Authorization on Bulk Publish Endpoint

AppFlowy-Cloud versions 0.7.2 through 0.9.64 fail to authorize callers against the workspace in the bulk publish endpoint path, allowing authenticated users to publish content into other tenants' namespaces. Attackers can write published views with attacker-controlled title, body and metadata int...

CVE-2026-80354

Authorization bypass through User-Controlled key vulnerability in Apache Camel K. An authorization vulnerability in custom resource resolution allows a tenant to reference secrets by name in the operator namespace, potentially exposing secrets belonging to other tenants or operator components. Th...

CVE-2026-80354

Apache Camel K is a Kubernetes operator for Apache Camel integration applications. This vulnerability is an authorization bypass in the Builder trait mavenProfiles ValueSources , where custom resource resolution allows a tenant to reference secrets by name in the operator namespace , potentially ...

EUVD-2026-75292

Authorization bypass through User-Controlled key vulnerability in Apache Camel K. An authorization vulnerability in custom resource resolution allows a tenant to reference secrets by name in the operator namespace, potentially exposing secrets belonging to other tenants or operator components. Th...

kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done

A flaw was found in the Linux kernel. A remote attacker could exploit a use-after-free vulnerability in the Transparent Inter-Process Communication TIPC cryptographic decryption process. This flaw occurs when a network namespace, a mechanism for isolating network resources, is deallocated before ...

kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done

A flaw was found in the Linux kernel. A remote attacker could exploit a use-after-free vulnerability in the Transparent Inter-Process Communication TIPC cryptographic decryption process. This flaw occurs when a network namespace, a mechanism for isolating network resources, is deallocated before ...

CVE-2026-15140

A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift OCP. Only under specific conditions during the initial provisioning of a Portworx storage cluster, a user holding only limited, namespace-scoped permissions could cause the operator to grant broader access th...

CVE-2026-15140

A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift OCP. Only under specific conditions during the initial provisioning of a Portworx storage cluster, a user holding only limited, namespace-scoped permissions could cause the operator to grant broader access th...

EUVD-2026-74894

A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift OCP. Only under specific conditions during the initial provisioning of a Portworx storage cluster, a user holding only limited, namespace-scoped permissions could cause the operator to grant broader access th...

CVE-2026-15140

A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift OCP. Only under specific conditions during the initial provisioning of a Portworx storage cluster, a user holding only limited, namespace-scoped permissions could cause the operator to grant broader access th...

CVE-2026-15140

CVE-2026-15140 is a privilege-escalation vulnerability in the Portworx Operator when deployed on Red Hat OpenShift (OCP) . During the initial provisioning of a Portworx storage cluster, under specific conditions, a user with only namespace-scoped permissions can cause the operator to grant broade...