CVE-2026-25212

CVE-2026-25212 – Percona PMM RCE PoC Critical – CVSS 9.9 – Authenticated Remote Code Execution in PMM 3.7. Description This proof‑of‑concept exploits a vulnerability where an internal PostgreSQL user in PMM retains 'SUPERUSER' privileges. An authenticated attacker with 'pmm-admin' rights can abus...

CVE-2021-27928-POC

CVE-2021-27928 POC Description A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval...

CVE-2021-27928

Information Exploit Title: MariaDB 10.2 /MySQL - 'wsrepprovider' OS Command Execution Date: 03/18/2021 Exploit Author: Central InfoSec Version: MariaDB 10.2 before 10.2.37 10.3 before 10.3.28 10.4 before 10.4.18 10.5 before 10.5.9 Percona Server through 2021-03-03; and the wsrep patch through...

mysqld_safe-CVE-2016-6662-patch

MySQL server CVE-2016-6662 patch playbook How it works It adds the Percona fix to the mysqldsafe file. Which operating systems are supported CentOS FreeBSD How to use it ansible-playbook mysqld-safe-patch.yml...

PT-2026-117130

These are all security issues fixed in the percona-toolkit-3.7.1.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12166-1 percona-toolkit-3.7.1.4-1.1 on GA media

These are all security issues fixed in the percona-toolkit-3.7.1.4-1.1 package on the GA media of openSUSE Tumbleweed...

GO-2026-6488 vulnerabilities

Vulnerabilities for packages: grafana-geomys-fips, percona-grafana, commercial-grafana, grafana-fips, grafana...

CLEANSTART-2026-LX31883 Security fix for GHSA-gx3x-vq4p-mhhv applied in: cert-manager-cmctl 2.3.0-r1, cert-manager-cmctl-fips 2.4.0-r2, percona-xtradb-cluster-operator 1.19.0-r1, percona-xtradb-cluster-operator-fips 1.19.0-r1

GHSA-gx3x-vq4p-mhhv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OJ21892 Security fix for CVE-2026-25518 applied in: cert-manager-cmctl-fips 2.4.0-r2, percona-xtradb-cluster-operator 1.18.0-r1, percona-xtradb-cluster-operator-fips 1.18.0-r1, step-issuer 0.9.11-r1

CVE-2026-25518 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes-fips, step-issuer-fips, cert-manager-webhook-pdns-fips, aws-privateca-issuer-fips, cert-manager-csi-driver-fips, percona-server-mongodb-operator, cert-manager-google-cas-issuer-fips, percona-xtradb-cluster-operator-fips, step-issuer,...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, cert-manager-cmctl, cert-manager-istio-csr, step-issuer, opentelemetry-operator, cert-manager-csi-driver, cert-manager-webhook-pdns, aws-privateca-issuer, mariadb-operator...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-linode, kube-state-metrics, rekor, rancher, step-issuer, aws-nuke, net-kourier, actions-runner-controller, rancher-helm, omnibump, descheduler, chisel, conftest, q, kubescape-operator, controller-gen, k9s, kubernetes-csi-node-driver-registrar,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: git-sync, http-echo, actions-runner-controller, omnibump, helm-set-status, chisel, flux-helm-controller, kubernetes-csi-node-driver-registrar, redpanda, etcd, step-kms-plugin, redis-operator, contour, falcoctl, rqlite, dive, envoy-ratelimit, sftpgo-plugin-eventstore,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: terraform, git-sync, docker-machine-driver-linode, langfuse, http-echo, step, actions-runner-controller, rancher-helm, terraform-provider-time, helm-set-status, wave, lvm-driver, descheduler, chisel, conftest, pguser, kubescape-operator, kubo,...

CLEANSTART-2026-SP46945 Security fixes in percona-server-mongodb-operator 1.23.0-r0

Package percona-server-mongodb-operator version 1.23.0-r0 fixes 22 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-LM86108 Security fixes in percona-xtradb-cluster-operator-fips 1.16.1-r0

Package percona-xtradb-cluster-operator-fips version 1.16.1-r0 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...

CLEANSTART-2026-ND31418 Security fixes in percona-xtradb-cluster-operator 1.19.1-r1

Package percona-xtradb-cluster-operator version 1.19.1-r1 fixes 9 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-EZ87718 Security fixes in percona-xtradb-cluster-operator-fips 1.18.0-r1

Package percona-xtradb-cluster-operator-fips version 1.18.0-r1 fixes 8 vulnerabilities: CVE-2025-61726, CVE-2025-61730, CVE-2025-68121, CVE-2025-61728, CVE-2025-68119...

CLEANSTART-2026-IB41963 Security fixes in percona-xtradb-cluster-operator 1.18.0-r1

Package percona-xtradb-cluster-operator version 1.18.0-r1 fixes 8 vulnerabilities: CVE-2025-61726, CVE-2025-61730, CVE-2025-68121, CVE-2025-61728, CVE-2025-68119...

CLEANSTART-2026-SE63944 Security fixes in percona-xtradb-cluster-operator-fips 1.19.0-r1

Package percona-xtradb-cluster-operator-fips version 1.19.0-r1 fixes 3 vulnerabilities: ghsa-gx3x-vq4p-mhhv, CVE-2025-68121, CVE-2025-61732...