CVE-2026-93017

The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref:...

CVE-2026-93017

The insights-operator contains a security misconfiguration where the insights-operator-gather ClusterRole grants the gather service account excessive permissions. Specifically, it allows read access (get, list) to secrets in the core API group without any namespace or resource names restrictions....

CVE-2026-93017 Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader

The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref:...

EUVD-2026-95030

The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref:...

CVE-2026-93017

The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref:...

CVE-2024-53900

CTF Challenge - Mongoose RCE CVE-2024-53900 نظرة عامة على التحدي تستند تحديات «Capture The Flag» CTF هذه إلى CVE-2024-53900، وهي ثغرة أمنية في Mongoose تسمح بتنفيذ الأوامر عن بُعد RCE بسبب الاستخدام غير السليم لمشغل $where في استعلامات MongoDB. هدفك هو استغلال هذه الثغرة واسترجاع العلم المخفي داخ...

CVE-2018-16509

CVE-2018-16509 ملعب Docker "تم اكتشاف مشكلة في Artifex Ghostscript قبل الإصدار 9.24. يمكن استخدام الفحص غير الصحيح لـ "استعادة الامتياز" أثناء معالجة استثناءات /invalidaccess من قبل المهاجمين القادرين على توفير PostScript مُصمم لتنفيذ التعليمات البرمجية باستخدام تعليمة "pipe"."...

CLEANSTART-2026-PE22489 Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack when the power operator (^) is used with a BigDecimal or...

Security vulnerability affects the apache-nifi-registry package. Applications that evaluate user-supplied Spring Expression Language SpEL expressions may be vulnerable to a Denial of Service DoS attack when the power operator ^ is used with a BigDecimal or BigInteger operand and a large exponent...

EulerOS 2.0 SP15 : perl-DBI (EulerOS-SA-2026-4001)

According to the versions of the perl-DBI packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders.x000D x000D The fi...

CVE-2026-105816 Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Raft...

Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

Summary Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Ra...

Important: Red Hat Security Advisory: Red Hat Web Terminal Operator 1.11.2 release.

Red Hat Web Terminal Operator 1.11.2 has been released. The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed...

CVE-2026-107176

A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the samples-operat...

CVE-2026-107176

A vulnerability exists in the cluster-samples-operator where the RBAC Role coreos-pull-secret-reader in the openshift-config namespace grants excessive permissions. The role provides get, list, and watch access to all Secret resources because it lacks resourceNames scoping, even though the operat...

CVE-2026-107176 Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secret

A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the samples-operat...

EUVD-2026-94581

A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the samples-operat...

CVE-2026-107176 Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secret

A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the samples-operat...

CVE-2026-107176

A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the samples-operat...

PT-2026-107666

A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the samples-operat...

CVE-2026-26287

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Starting in version 0.10.0 and prior to version 1.3.2, a bug in the webhook generator initialization order incorrectly cleared the label-enforcement flag EnforceLabel...