GO-2025-3828 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, newrelic-fluent-bit-output...

GO-2026-4829 vulnerabilities

Vulnerabilities for packages: nats, nats-top, kine, k3s...

GO-2025-3660 vulnerabilities

Vulnerabilities for packages: cosign, kots, conftest, tfsec, trivy, spire-server, policy-controller, kyverno-notation-aws, witness...

GO-2026-6000 vulnerabilities

Vulnerabilities for packages: vitess, kubernetes-dns-node-cache, datadog-operator, datadog-agent...

GO-2026-5746 vulnerabilities

Vulnerabilities for packages: grafana-alloy, buildah, trivy, grafana, aws-otel-collector, trivy-operator, opentelemetry-operator, undock, rancher-agent, ko, docker-credential-gcr, kots, rancher-machine, nerdctl, rancher, spire-server, nuclei, kpt, datadog-agent, podman,...

GO-2026-4341 vulnerabilities

Vulnerabilities for packages: authservice, podinfo, crossplane-provider-aws-firehose, osv-scanner, hubble, bank-vaults, policy-controller, go-licenses, flannel, spark-operator, terraform-provider-time, kubeflow, steampipe, croc, clickhouse-operator, slsa-verifier, grafana-operator,...

GO-2026-4550 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, osv-scanner, nfpm, crossplane-provider-aws-kms, policy-controller, terraform-provider-azuread, crossplane-provider-aws-eks, crossplane, crossplane-provider-azure-managedidentity, kubevela, trivy-operator, crossplane-provider-aws-iam,...

CVE-2026-19626: Improper Neutralization of Directives in Dynamically Evaluated Code

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in...

PT-2026-72055

Name of the Vulnerable Software and Affected Versions Tenable Security Center affected versions not specified Description A remote code execution issue exists in the report generation functionality. An authenticated, non-administrative user can exploit this by providing specially crafted input th...

MINI-GRJ7-P3HH-QV6R

Bulletin has no description...

CVE-2026-73575

creationtimestamp| type| source ---|---|--- 2026-08-13 16:50:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2ep36ij3vbet4...

CVE-2026-54249

creationtimestamp| type| source ---|---|--- 2026-08-13 16:32:36+00:00| seen| https://gist.github.com/alon710/d833b9431a8f61aeff2a0496f83968ee...

Frappe Prepared Report / Query Report bypass subject, owner and row-level permission checks to read other users' report data

Frappe Prepared Report / Query Report Bypass Permission Checks to Read Other Users' Report Data Vulnerability Overview Query Report in Frappe Framework supports background pre-generation Prepared Report: the query is executed with the initiating user's privileges and the result is persisted for...

EUVD-2026-57884

Unauthenticated Broken Authentication in Cartify = 1.3.0.1 versions...

CVE-2026-63293

creationtimestamp| type| source ---|---|--- 2026-08-13 13:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxqbydnxy2e...

CVE-2026-19004

creationtimestamp| type| source ---|---|--- 2026-08-13 12:45:03+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-2...

CVE-2026-58230

creationtimestamp| type| source ---|---|--- 2026-08-13 08:48:42+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

CVE-2026-66761

creationtimestamp| type| source ---|---|--- 2026-08-13 08:48:28+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

CVE-2026-18706

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:48+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

Tenable Security Center Report Charting RCE

Tenable Security Center prior to 6.9.0 allows an authenticated, non-administrative user to achieve code execution as the web service account tns through report generation. A report definition's inline style is discarded at render components rehydrate styles from the Style tables by styleID, so th...