CVE-2026-31881

CVE-2026-31881 (Runtipi): Affects the Runtipi personal homeserver orchestrator. Before version 4.8.0, an unauthenticated attacker could exploit the password reset flow at POST /api/auth/reset-password during an active 15-minute reset window to set a new operator password and gain admin access, ca...

CVE-2026-31881 Runtipi unauthenticated /api/auth/reset-password allows operator account takeover during active reset window

Runtipi is a personal homeserver orchestrator. Prior to 4.8.0, an unauthenticated attacker can reset the operator admin password when a password-reset request is active, resulting in full account takeover. The endpoint POST /api/auth/reset-password is exposed without authentication/authorization...

CVE-2026-31881 Runtipi unauthenticated /api/auth/reset-password allows operator account takeover during active reset window

Runtipi is a personal homeserver orchestrator. Prior to 4.8.0, an unauthenticated attacker can reset the operator admin password when a password-reset request is active, resulting in full account takeover. The endpoint POST /api/auth/reset-password is exposed without authentication/authorization...

CVE-2019-25483 Comtrend AR-5310 GE31-412SSG-C01_R10.A2pG039u.d24k Restricted Shell Escape

Comtrend AR-5310 GE31-412SSG-C01R10.A2pG039u.d24k contains a restricted shell escape vulnerability that allows local users to bypass command restrictions by using the command substitution operator $ . Attackers can inject arbitrary commands through the $ syntax when passed as arguments to allowed...

Important: Red Hat Security Advisory: RHTAS 1.3.2 - Tech Preview Release Of the Model Validation Operator

The Tech Preview release of the RHTAS Model Validation Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.3 The RHTAS Model Validation Operator can be used with OpenShift Container Platform 4.16, 4.17,...

CVE-2026-30962

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.6 and 8.6.19, the validation for protected fields only checks top-level query keys. By wrapping a query constraint on a protected field inside a logical operator, the check...

EUVD-2026-10826

Feathers has a NoSQL Injection via WebSocket id Parameter in MongoDB Adapter...

GHSA-P9XR-7P9P-GPQX Feathers has a NoSQL Injection via WebSocket id Parameter in MongoDB Adapter

Socket.IO clients can send arbitrary JavaScript objects as the id argument to any service method get, patch, update, remove. The transport layer performs no type checking on this argument. When the service uses the MongoDB adapter, these objects pass through getObjectId and land directly in the...

CVE-2026-30962

Parse Server is vulnerable prior to versions 9.5.2-alpha.6 and 8.6.19 due to a flawed protection check that only validates top-level query keys for protected fields. By wrapping a query constraint on a protected field inside a logical operator, the check is bypassed, allowing any authenticated us...

GO-2026-4591 Rancher Backup Operator pod's logs leak S3 tokens in github.com/rancher/backup-restore-operator

Rancher Backup Operator pod's logs leak S3 tokens in github.com/rancher/backup-restore-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerabili...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: net-kourier, kubernetes-dashboard-api, promxy, victoriametrics-cluster, gitea, langfuse, flux-source-controller, minio-object-browser, rancher-telemetry, croc, fuse-overlayfs-snapshotter, mesosphere-vsphere-csi, aws-flb-kinesis, pdfcpu, mountpoint-s3-csi-driver,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: net-kourier, kubernetes-dashboard-api, promxy, victoriametrics-cluster, gitea, langfuse, flux-source-controller, minio-object-browser, rancher-telemetry, croc, fuse-overlayfs-snapshotter, mesosphere-vsphere-csi, aws-flb-kinesis, pdfcpu, mountpoint-s3-csi-driver,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: net-kourier, kubernetes-dashboard-api, promxy, victoriametrics-cluster, gitea, langfuse, flux-source-controller, minio-object-browser, rancher-telemetry, croc, wazero, fuse-overlayfs-snapshotter, mesosphere-vsphere-csi, aws-flb-kinesis, pdfcpu,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, consul, onepassword-operator, cloud-sql-proxy, k8ssandra-operator, sftpgo-plugin-eventstore, helm-exporter, nginx-prometheus-exporter, dcgm-exporter, terragrunt-fips, gomplate, beats-fips, pulumi, kong-ingress-controller-fips, kyverno,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, consul, onepassword-operator, cloud-sql-proxy, k8ssandra-operator, kubernetes-replicator, timestamp-authority-fips, sftpgo-plugin-eventstore, nri-discovery-kubernetes-fips, helm-exporter, consul-k8s, podman-fips, nginx-prometheus-exporter,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, consul, kratos, onepassword-operator, cloud-sql-proxy, k8ssandra-operator, kubernetes-replicator, timestamp-authority-fips, sftpgo-plugin-eventstore, nri-discovery-kubernetes-fips, helm-exporter, consul-k8s, gitlab-cng, nginx-prometheus-exporter,...

CLEANSTART-2026-AB04032 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the fluent-operator-fips package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

PT-2026-24455

Name of the Vulnerable Software and Affected Versions Parse Server versions prior to 9.5.2-alpha.6 Parse Server versions prior to 8.6.19 Description Parse Server, an open source backend deployable on Node.js infrastructures, contains a flaw in its validation process for protected fields. The...

OpenClaw: `operator.write` chat.send could reach admin-only config writes

Summary A gateway client authenticated with operator.write could route /config set or /config unset through chat.send and reach persistent config mutation even though direct config RPC methods are admin-scoped. Affected Packages / Versions - Package: openclaw npm - Latest published vulnerable...

GHSA-HFPR-JHPQ-X4RM OpenClaw: `operator.write` chat.send could reach admin-only config writes

Summary A gateway client authenticated with operator.write could route /config set or /config unset through chat.send and reach persistent config mutation even though direct config RPC methods are admin-scoped. Affected Packages / Versions - Package: openclaw npm - Latest published vulnerable...