CVE-2021-27928

Information Exploit Title: MariaDB 10.2 /MySQL - 'wsrepprovider' OS Command Execution Date: 03/18/2021 Exploit Author: Central InfoSec Version: MariaDB 10.2 before 10.2.37 10.3 before 10.3.28 10.4 before 10.4.18 10.5 before 10.5.9 Percona Server through 2021-03-03; and the wsrep patch through...

CVE-2021-27928-POC

CVE-2021-27928 POC Description A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval...

mysqld_safe-CVE-2016-6662-patch

MySQL server CVE-2016-6662 patch playbook How it works It adds the Percona fix to the mysqldsafe file. Which operating systems are supported CentOS FreeBSD How to use it ansible-playbook mysqld-safe-patch.yml...

CVE-2026-25212

CVE-2026-25212 – Percona PMM RCE PoC Critical – CVSS 9.9 – Authenticated Remote Code Execution in PMM 3.7. Description This proof‑of‑concept exploits a vulnerability where an internal PostgreSQL user in PMM retains 'SUPERUSER' privileges. An authenticated attacker with 'pmm-admin' rights can abus...

GO-2026-6889 vulnerabilities

Vulnerabilities for packages: kuberay-operator, cert-manager-webhook-pdns, cert-manager-istio-csr, mariadb-operator, step-issuer, cert-manager-cmctl, aws-privateca-issuer, percona-server-mongodb-operator, cert-manager-csi-driver...

GO-2026-6889 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns-fips, athenz-csi-driver, percona-xtradb-cluster-operator-fips, kuberay-operator-fips, cert-manager-webhook-pdns, athenz-cert-manager-issuer, aws-privateca-issuer-fips, step-issuer-fips, cert-manager-istio-csr, mariadb-operator-fips,...

GHSA-8RVJ-MM4H-C258 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns-fips, athenz-csi-driver, percona-xtradb-cluster-operator-fips, kuberay-operator-fips, cert-manager-webhook-pdns, athenz-cert-manager-issuer, aws-privateca-issuer-fips, step-issuer-fips, cert-manager-istio-csr, mariadb-operator-fips,...

percona-toolkit-3.7.1.4-1.1 on GA media (moderate)

percona-toolkit-3.7.1.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:12166-1 Rating: moderate Cross-References: CVE-2022-28948 CVE-2026-25680 CVE-2026-25681 CVE-2026-33814 CVE-2026-39820 CVE-2026-39821 CVE-2026-39829 CVE-2026-39835 CVE-2026-42502 CVE-2026-46595 CVSS scores: CVE-2022-28948 SU...

OPENSUSE-SU-2026:12166-1 percona-toolkit-3.7.1.4-1.1 on GA media

These are all security issues fixed in the percona-toolkit-3.7.1.4-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-117130

These are all security issues fixed in the percona-toolkit-3.7.1.4-1.1 package on the GA media of openSUSE Tumbleweed...

GO-2026-6488 vulnerabilities

Vulnerabilities for packages: percona-grafana, grafana-geomys-fips, grafana, commercial-grafana, grafana-fips...

CLEANSTART-2026-LX31883 Security fix for GHSA-gx3x-vq4p-mhhv applied in: cert-manager-cmctl 2.3.0-r1, cert-manager-cmctl-fips 2.4.0-r2, percona-xtradb-cluster-operator 1.19.0-r1, percona-xtradb-cluster-operator-fips 1.19.0-r1

GHSA-gx3x-vq4p-mhhv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OJ21892 Security fix for CVE-2026-25518 applied in: cert-manager-cmctl-fips 2.4.0-r2, percona-xtradb-cluster-operator 1.18.0-r1, percona-xtradb-cluster-operator-fips 1.18.0-r1, step-issuer 0.9.11-r1

CVE-2026-25518 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns-fips, percona-xtradb-cluster-operator-fips, cert-manager-webhook-pdns, aws-privateca-issuer-fips, step-issuer-fips, cert-manager-istio-csr, mariadb-operator-fips, percona-xtradb-cluster-operator, cert-manager-google-cas-issuer,...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, cert-manager-istio-csr, mariadb-operator, step-issuer, cert-manager-cmctl, opentelemetry-operator, aws-privateca-issuer, percona-server-mongodb-operator, cert-manager-csi-driver...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, crossplane-provider-aws-dynamodb, prometheus, crossplane-provider-aws-memorydb, delve, grafana, act, cluster-autoscaler, newrelic-nri-statsd, opa, tetragon, descheduler, nri-apache, ksops, vertical-pod-autoscaler,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: kwok, verticadb-operator, gitness, amass, delve, newrelic-nri-statsd, cluster-autoscaler, nri-apache, kbld, controller-gen, sftpgo-plugin-eventsearch, local-path-provisioner, omnibump, fscrypt, nginx-prometheus-exporter, dgraph,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, kapp, crossplane-provider-aws-dynamodb, maru, verticadb-operator, mods, spire-controller-manager, wgcf, gitness, amass, helm-operator, newrelic-nri-statsd, extism, tetragon, descheduler, ksops, nri-mongodb, vertical-pod-autoscaler, kor,...

CLEANSTART-2026-SP46945 Security fixes in percona-server-mongodb-operator 1.23.0-r0

Package percona-server-mongodb-operator version 1.23.0-r0 fixes 22 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-SE63944 Security fixes in percona-xtradb-cluster-operator-fips 1.19.0-r1

Package percona-xtradb-cluster-operator-fips version 1.19.0-r1 fixes 3 vulnerabilities: ghsa-gx3x-vq4p-mhhv, CVE-2025-68121, CVE-2025-61732...