CVE-2026-0055: Improper Limitation of a Pathname to a Restricted Directory

In createSessionInternal of PackageInstallerService.java, there is a possible to update a Device Policy Controller DPC into an invalid directory due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

PT-2026-45576

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A path traversal error exists in the createSessionInternal function of the PackageInstallerService.java class within the Framework component. This flaw allows a local attacker to update a...

CLEANSTART-2026-YQ26872 Security fixes for CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2026-1229, CVE-2026-24051, CVE-2026-34986, CVE-2026-39984, ghsa-78h2-9frx-2jm8, ghsa-pmwq-pjrm-6p5r, ghsa-xm5m-wgh2-rrg3 applied in versions: 0.13.1-r0, 0.15.1-r0

Multiple security vulnerabilities affect the policy-controller-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FA95643 Security fixes for CVE-2026-33814, CVE-2026-34986, CVE-2026-39883, CVE-2026-39984, ghsa-pmwq-pjrm-6p5r applied in versions: 0.15.1-r0

Multiple security vulnerabilities affect the policy-controller package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: rekor, dagger, falcoctl, kyverno, ratify, kyverno-notation-aws, docker, gitsign, tflint, vexctl, guac, buildkitd, kubescape, flux-source-controller, bom, aactl, ko, neuvector-sigstore-interface, cosign, gh, tekton-chains, goreleaser, policy-controller, gitlab-runner,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: tkn, rekor, aactl, spire-server, skaffold, ko, chainloop-control-plane-fips, docker, commercial-kyverno, tekton-chains, buildkitd-fips, kubescape-server, cloudbeat, slsa-verifier, gitsign, tekton-chains-fips, ratify, trivy, zarf, goreleaser, crossplane,...

Cisco APIC Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Application Policy Infrastructure Controller is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Application Policy Infrastructure Controller due to a signal handler race condition found in sshd, where a client does...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: falcoctl, kyverno, ratify, sigstore-scaffolding, kyverno-notation-aws, docker, gitsign, tflint, vexctl, buildkitd, kubescape, flux-source-controller, aactl, ko, neuvector-sigstore-interface, cosign, gh, tekton-chains, goreleaser, policy-controller, trivy, tkn, zot,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: falcoctl, kyverno, ratify, sigstore-scaffolding, kyverno-notation-aws, docker, gitsign, tflint, vexctl, buildkitd, kubescape, flux-source-controller, aactl, ko, neuvector-sigstore-interface, cosign, gh, tekton-chains, goreleaser, policy-controller, trivy, tkn, zot,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: grafana-mimir, neuvector-scanner, rabbitmq-messaging-topology-operator, cert-manager-cmctl, docker-credential-gcr, step-issuer, newrelic-infrastructure-agent, kwok, sftpgo, migrate, crossplane-provider-azure-sql, runc, helm, tetragon, terraform-provider-azuread, kpt,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: grafana-mimir, rabbitmq-messaging-topology-operator, terraform-provider-grafana, step-issuer, newrelic-infrastructure-agent, kwok, flyte, haproxy-ingress, crossplane-provider-azure-sql, migrate, kapp, falcosidekick, ratify, sftpgo, tfsec, rabbitmq-cluster-operator,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: grafana-mimir, rabbitmq-messaging-topology-operator, terraform-provider-grafana, step-issuer, newrelic-infrastructure-agent, kwok, flyte, haproxy-ingress, crossplane-provider-azure-sql, migrate, kapp, falcosidekick, ratify, sftpgo, tfsec, rabbitmq-cluster-operator,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: crossplane-provider-gcp-fips, terraform-mcp-server, minio-fips, crossplane-provider-aws-cloudsearch-fips, crossplane-provider-sql-fips, gatekeeper, gatekeeper-fips, kube-arangodb-fips, ceph-csi-operator-fips, loki, aactl, crossplane-provider-aws-cloudformation-fips,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: crossplane-provider-gcp-fips, terraform-mcp-server, minio-fips, crossplane-provider-aws-cloudsearch-fips, crossplane-provider-sql-fips, gatekeeper, gatekeeper-fips, kube-arangodb-fips, ceph-csi-operator-fips, loki, aactl, crossplane-provider-aws-cloudformation-fips,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: rclone-fips, argo-workflows, crossplane-provider-azure-authorization, src-fingerprint-fips, flux, crossplane-provider-aws-elasticache-fips, crossplane-provider-aws-ecr, openbao, witness, crossplane-provider-aws-rds, aactl, crossplane-provider-aws-cloudformation-fips,...

CVE-2026-26207

CVE-2026-26207 affects Discourse with the discourse-policy plugin. Prior to versions 2025.12.2, 2026.1.1 and 2026.2.0, PolicyController loads posts by ID without verifying the current user’s visibility, allowing authenticated users to interact with policies on posts they cannot view and to enumer...

CVE-2026-20107

The CVE concerns Cisco Application Policy Infrastructure Controller (APIC) in the Object Model CLI. A vulnerability in the CLI input validation could allow an authenticated, local attacker with any role granting CLI access to issue crafted commands and trigger a device reload, causing a DoS. Affe...

Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability

A vulnerability in the Object Model CLI component of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. To exploit this vulnerability, the attacker...

Important: Red Hat Security Advisory: RHTAS - Tech Preview Release Of the Policy Controller Operator

The Tech Preview release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.3 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.16, 4.17,...

Important: Red Hat Security Advisory: RHTAS - Tech Preview Release Of the Policy Controller Operator

The Tech Preview release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.3 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.16, 4.17,...