CLEANSTART-2026-AQ98798 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, CVE-2026-46680, CVE-2026-47262, CVE-2026-48978, CVE-2026-50151, CVE-2026-50162, CVE-2026-53488, ghsa-fqw6-gf59-qr4w, ghsa-jpcc-p29g-p8mq, ghsa-vh4v-2xq2-g5cg, ghsa-xhf5-7wjv-pqxp applied in versions: 1.42.0-r0, 1.42.1-r0, 1.42.1-r1

Multiple security vulnerabilities affect the tigera-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack

Researchers at Sysdig have linked a second attack on the same Langflow server to JADEPUFFER, the AI-agent-driven operator it first documented earlier this month. The same operator has now been spotted deploying ENCFORGE , a new compiled Go ransomware designed to encrypt model weights, vector...

CLEANSTART-2026-PY84482 Security fixes for CVE-2025-15558, CVE-2026-39822, CVE-2026-42504, CVE-2026-42505, CVE-2026-46600, CVE-2026-56852 applied in versions: 1.8.1-r2, 1.8.1-r3, 1.8.1-r4

Multiple security vulnerabilities affect the dynatrace-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VU72808 Security fixes for CVE-2025-61729, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-39821, CVE-2026-39822, CVE-2026-39883, CVE-2026-42502, CVE-2026-42505, CVE-2026-42506, CVE-2026-46600, CVE-2026-56852, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-mpwr-8vm7-h73f, ghsa-pjcq-xvwq-hhpj applied in versions: 1.1.0-r0, 2.4.1-r0, 2.5.0-r0, 2.6.0-r1, 2.6.0-r3

Multiple security vulnerabilities affect the external-secrets-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PH23874 Security fixes for CVE-2025-61729, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-39821, CVE-2026-39822, CVE-2026-39883, CVE-2026-42502, CVE-2026-42505, CVE-2026-42506, CVE-2026-46600, CVE-2026-56852, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-mpwr-8vm7-h73f, ghsa-pjcq-xvwq-hhpj applied in versions: 1.1.0-r0, 2.4.1-r0, 2.5.0-r0, 2.6.0-r1, 2.6.0-r3, 2.7.0-r1

Multiple security vulnerabilities affect the external-secrets-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-62484

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a low privileged attacker with network access via HTTPS to compromise the system. Successful exploitation can lead to a full...

PT-2026-62483

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a low-privileged attacker with access to the infrastructure where the database executes to compromise the system. This issue c...

PT-2026-62487

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a low-privileged attacker with access to the infrastructure where the database executes to compromise the system. This issue c...

PT-2026-62490

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a low-privileged attacker with network access via HTTPS to compromise the system. This can lead to unauthorized read access to...

CVE-2026-60410: Uncontrolled Resource Consumption

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise TimesTen...

CVE-2026-60569: Missing Authentication for Critical Function

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: NDB Operator. Supported versions that are affected are 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Cluster...

PT-2026-62488

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a high-privileged attacker with access to the infrastructure where the database executes to compromise the system. Successful...

CVE-2026-60409: Improper Access Control

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where TimesTen...

CVE-2026-60402: Improper Access Control

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise TimesTen...

CVE-2026-60405: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where TimesTen...

CVE-2026-60407: Improper Access Control

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where TimesTen...

PT-2026-62486

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a low-privileged attacker with network access via HTTPS to compromise the system. This can lead to an unauthorized hang or a...

PT-2026-62611

Name of the Vulnerable Software and Affected Versions Oracle MySQL Cluster versions 8.0.0 through 8.0.47 Oracle MySQL Cluster versions 8.4.0 through 8.4.10 Oracle MySQL Cluster versions 9.7.0 through 9.7.1 Description An issue exists in the NDB Operator component of Oracle MySQL Cluster. An...

PT-2026-62485

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a low-privileged attacker with network access via HTTPS to compromise the system. This can lead to an unauthorized hang or a...

CVE-2026-60406: Improper Privilege Management

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where TimesTen...