GO-2026-5617 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, nerdctl-fips, google-cloud-otel-ops-collector, harvester, spire-server-fips, skopeo-fips, aws-otel-collector-fips, chainloop-control-plane, envoy-gateway, spire-server, elastic-agent, vault, grafana-fips, commercial-grafana, aws-otel-collector,...

GO-2025-3836 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GO-2025-3840 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GO-2025-3788 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GO-2026-5031 vulnerabilities

Vulnerabilities for packages: seaweedfs...

GO-2025-3646 vulnerabilities

Vulnerabilities for packages: k3s...

GO-2026-4471 vulnerabilities

Vulnerabilities for packages: gatus...

GO-2025-4109 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GO-2026-5047 vulnerabilities

Vulnerabilities for packages: dapr, bento, splunk-otel-collector, opentelemetry-collector-contrib...

GO-2026-4316 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler...

GO-2023-2073 vulnerabilities

Vulnerabilities for packages: croc...

GO-2026-4312 vulnerabilities

Vulnerabilities for packages: datadog-agent...

GO-2026-5099 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2024-2962 vulnerabilities

Vulnerabilities for packages: argo-workflows, newrelic-fluent-bit-output, kubeflow-katib...

WordPress WooCommerce Subscriptions plugin < 9.1.0 - Unauthenticated RCE via PHP Object Injection vulnerability

Unauthenticated RCE via PHP Object Injection vulnerability discovered by Vasily Belolapotkov, Vlad Olaru in WordPress Plugin WooCommerce Subscriptions versions 9.1.0...

CVE-2026-73076

A vulnerability in Vim allows remote attackers to execute arbitrary commands by crafting a malicious .VimballRecord file that injects OS commands executed when processed by the vimballRmVimball function. Mitigation Avoid installing or removing vimballs from untrusted sources. This vulnerability...

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...

Sophos Firewall <= 19.0 MR1 - Remote Code Execution

Sophos Firewall version v19.0 MR1 and older is vulnerable to code injection in the User Portal and Webadmin, allowing a remote unauthenticated attacker to execute arbitrary code. id: CVE-2022-3236 info: name: Sophos Firewall = 19.0 MR1 - Remote Code Execution author: daffainfo severity: critical...

Zoho ManageEngine - Remote Code Execution

Zoho ManageEngine Password Manager Pro, PAM 360, and Access Manager Plus are susceptible to unauthenticated remote code execution via XML-RPC. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary...

CVE-2026-66909

A flaw was found in Apache CXF. The Java Message Service JMS transport component improperly deserializes inbound JMS ObjectMessages without type restrictions. A remote attacker can exploit this by sending a specially crafted message to the service's JMS destination. This vulnerability could lead ...